CVS update: samba/source/tdb

jreilly at samba.org jreilly at samba.org
Tue May 29 09:34:54 EST 2001


Date:	Mon May 28 16:34:54 2001
Author:	jreilly

Update of /data/cvs/samba/source/tdb
In directory va:/tmp/cvs-serv13914/tdb

Modified Files:
      Tag: APPLIANCE_HEAD
	tdbutil.c 
Log Message:
Fix nasty malloc/free bug when setting a printer attribute with a zero length (Lexmark
drivers do this). tdb_unpack() on case 'B' was leaving the data pointer uninitialized.
This seemed OK (but bad practice) for a zero lenght buffer, but many cycles later
free_nt_printer_param() did a safe_free on the uninitialized pointer. This affected
both APPLIANCE_HEAD and 2.2 (HEAD too I expect).

2.2 only was hit by a differert aspect of the situation above. When a zero len attribute
is processed by api_spoolss_setprinterdata(), talloc (in non DEBUG_TALLOC), returns NULL
up the chain and "unable to unmarshall SPOOL_Q_SETPRINTERDATA" occurs.

JohnR


Revisions:
tdbutil.c		1.9.2.4 => 1.9.2.5
	http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbutil.c?r1=1.9.2.4&r2=1.9.2.5




More information about the samba-cvs mailing list