<br><br><div class="gmail_quote">On Mon, Jan 11, 2010 at 7:00 PM, Jeff Layton <span dir="ltr"><<a href="mailto:jlayton@redhat.com">jlayton@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="h5">On Mon, 11 Jan 2010 15:57:44 -0600<br>
Steve French <<a href="mailto:smfrench@gmail.com">smfrench@gmail.com</a>> wrote:<br>
<br>
> > + }<br>
> > +<br>
> > + name_len = temp_fea->name_len;<br>
> > + value_len = le16_to_cpu(temp_fea->value_len);<br>
> > + if (temp_ptr + name_len + value_len > end_of_smb) {<br>
</div> ^^^^^^^^<br>
erm...I think I forgot to figure in the null<br>
terminator here on the name. I'll respin and<br>
resend. In case it's not obvious, please be<br>
sure to sanity check my pointer math in this<br>
patch :)<br>
<div class="im"><br>
</div></blockquote></div><br>ok ... :)<br><br clear="all"><br>-- <br>Thanks,<br><br>Steve<br>