[Samba] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9

Jeremy Allison jra at samba.org
Thu Dec 16 17:54:25 GMT 2004


On Thu, Dec 16, 2004 at 10:17:29AM -0600, David Schlenk wrote:
> Today's security patch doesn't work if you also want to use the 
> printing patch for 3.0.9 mentioned recently on this list.
> Build error:
> 
> Linking bin/smbd
> printing/printing.o(.text+0x2d4b): In function `print_queue_update':
> printing/printing.c:1421: undefined reference to `smb_xmalloc'
> collect2: ld returned 1 exit status
> make: *** [bin/smbd] Error 1

Change that reference at line 1421 to SMB_XMALLOC_ARRAY(char, len );
should do it (if it's the change I think it is).

Jeremy.


More information about the samba mailing list