diff options
| author | Volker Lendecke <vl@samba.org> | 2018-01-11 15:34:45 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2018-01-14 10:26:05 +0100 |
| commit | 0b57434151a8334a6e9b9b7542824ce4915421a2 (patch) | |
| tree | 8a148e7184186689efcfa1dbc359d5e779ab7231 /source3/librpc | |
| parent | 03f65a7cdc91091a171269cfebc9916f2f678388 (diff) | |
| download | samba-0b57434151a8334a6e9b9b7542824ce4915421a2.tar.gz | |
smbd: Fix channel sequence number checks for long-running requests
When the client's supplied csn overflows and hits a pending, long-running
request's csn, we panic. Fix this by counting the overflows in
smbXsrv_open_global0->channel_generation
Bug: https://bugzilla.samba.org/show_bug.cgi?id=13215
Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Volker Lendecke <vl@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source3/librpc')
| -rw-r--r-- | source3/librpc/idl/smbXsrv.idl | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/source3/librpc/idl/smbXsrv.idl b/source3/librpc/idl/smbXsrv.idl index 1bfa51ea912..d3f8d30d1e3 100644 --- a/source3/librpc/idl/smbXsrv.idl +++ b/source3/librpc/idl/smbXsrv.idl @@ -430,7 +430,8 @@ interface smbXsrv uint32 durable_timeout_msec; boolean8 durable; DATA_BLOB backend_cookie; - hyper channel_sequence; + uint16 channel_sequence; + hyper channel_generation; } smbXsrv_open_global0; typedef union { |