CVS update: samba/source/tdb
jreilly at samba.org
jreilly at samba.org
Tue May 29 09:34:54 EST 2001
Date: Mon May 28 16:34:54 2001
Author: jreilly
Update of /data/cvs/samba/source/tdb
In directory va:/tmp/cvs-serv13914/tdb
Modified Files:
Tag: APPLIANCE_HEAD
tdbutil.c
Log Message:
Fix nasty malloc/free bug when setting a printer attribute with a zero length (Lexmark
drivers do this). tdb_unpack() on case 'B' was leaving the data pointer uninitialized.
This seemed OK (but bad practice) for a zero lenght buffer, but many cycles later
free_nt_printer_param() did a safe_free on the uninitialized pointer. This affected
both APPLIANCE_HEAD and 2.2 (HEAD too I expect).
2.2 only was hit by a differert aspect of the situation above. When a zero len attribute
is processed by api_spoolss_setprinterdata(), talloc (in non DEBUG_TALLOC), returns NULL
up the chain and "unable to unmarshall SPOOL_Q_SETPRINTERDATA" occurs.
JohnR
Revisions:
tdbutil.c 1.9.2.4 => 1.9.2.5
http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbutil.c?r1=1.9.2.4&r2=1.9.2.5
More information about the samba-cvs
mailing list