diff options
| -rw-r--r-- | source4/librpc/rpc/dcerpc.c | 5 | ||||
| -rw-r--r-- | source4/librpc/rpc/dcerpc.h | 3 |
2 files changed, 6 insertions, 2 deletions
diff --git a/source4/librpc/rpc/dcerpc.c b/source4/librpc/rpc/dcerpc.c index 464ae9539a2..55b4385e42f 100644 --- a/source4/librpc/rpc/dcerpc.c +++ b/source4/librpc/rpc/dcerpc.c @@ -155,6 +155,7 @@ static struct dcecli_connection *dcerpc_connection_init(TALLOC_CTX *mem_ctx, */ c->srv_max_xmit_frag = 5840; c->srv_max_recv_frag = 5840; + c->max_total_response_size = DCERPC_NCACN_RESPONSE_DEFAULT_MAX_SIZE; c->pending = NULL; c->io_trigger = tevent_create_immediate(c); @@ -1577,10 +1578,10 @@ static void dcerpc_request_recv_data(struct dcecli_connection *c, length = pkt->u.response.stub_and_verifier.length; - if (req->payload.length + length > DCERPC_NCACN_PAYLOAD_MAX_SIZE) { + if (req->payload.length + length > c->max_total_response_size) { DEBUG(2,("Unexpected total payload 0x%X > 0x%X dcerpc response\n", (unsigned)req->payload.length + length, - DCERPC_NCACN_PAYLOAD_MAX_SIZE)); + (unsigned)c->max_total_response_size)); dcerpc_connection_dead(c, NT_STATUS_RPC_PROTOCOL_ERROR); return; } diff --git a/source4/librpc/rpc/dcerpc.h b/source4/librpc/rpc/dcerpc.h index 39d28a6e5d4..24c794800a1 100644 --- a/source4/librpc/rpc/dcerpc.h +++ b/source4/librpc/rpc/dcerpc.h @@ -107,6 +107,9 @@ struct dcecli_connection { /* the next context_id to be assigned */ uint32_t next_context_id; + + /* The maximum total payload of reassembled response pdus */ + size_t max_total_response_size; }; /* |