diff options
| author | Stefan Metzmacher <metze@samba.org> | 2016-04-22 16:18:24 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2016-04-28 16:51:15 +0200 |
| commit | 8704958fb3b212b401a8e7d94fdd9c627adbde0d (patch) | |
| tree | 27b70e4ff28270d6cce491e6218d0c3ea72cbbcc /source4/auth | |
| parent | 415872990eadaa7d5b999ecb3028e0cd422b2e8a (diff) | |
| download | samba-8704958fb3b212b401a8e7d94fdd9c627adbde0d.tar.gz | |
s4:gensec_tstream: allow wrapped messages up to a size of 0xfffffff
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11872
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'source4/auth')
| -rw-r--r-- | source4/auth/gensec/gensec_tstream.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/source4/auth/gensec/gensec_tstream.c b/source4/auth/gensec/gensec_tstream.c index 92f4fa6687c..c828170b170 100644 --- a/source4/auth/gensec/gensec_tstream.c +++ b/source4/auth/gensec/gensec_tstream.c @@ -253,7 +253,11 @@ static int tstream_gensec_readv_next_vector(struct tstream_context *unix_stream, msg_len = RIVAL(state->wrapped.hdr, 0); - if (msg_len > 0x00FFFFFF) { + /* + * I got a Windows 2012R2 server responding with + * a message of 0x1b28a33. + */ + if (msg_len > 0x0FFFFFFF) { errno = EMSGSIZE; return -1; } |