[SCM] Samba Shared Repository - branch v3-2-test updated -
release-3-2-0pre2-3233-gc2012ac
Jeremy Allison
jra at samba.org
Fri Dec 5 21:22:17 GMT 2008
The branch, v3-2-test has been updated
via c2012ac787c05361c7fa9589bec4f7e5c6482a28 (commit)
from 601c7eabfdb3d2725849669dda58de6db22d9b8f (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -----------------------------------------------------------------
commit c2012ac787c05361c7fa9589bec4f7e5c6482a28
Author: Volker Lendecke <Volker.Lendecke at SerNet.DE>
Date: Fri Dec 5 13:21:19 2008 -0800
Fix for crash bug freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set.
-----------------------------------------------------------------------
Summary of changes:
source/libsmb/smb_seal.c | 7 +++++++
1 files changed, 7 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/libsmb/smb_seal.c b/source/libsmb/smb_seal.c
index a81ae9a..795c8bc 100644
--- a/source/libsmb/smb_seal.c
+++ b/source/libsmb/smb_seal.c
@@ -388,10 +388,17 @@ void common_free_encryption_state(struct smb_trans_enc_state **pp_es)
void common_free_enc_buffer(struct smb_trans_enc_state *es, char *buf)
{
+ uint16_t enc_ctx_num;
+
if (!common_encryption_on(es)) {
return;
}
+ if (!NT_STATUS_IS_OK(get_enc_ctx_num((const uint8_t *)buf,
+ &enc_ctx_num))) {
+ return;
+ }
+
if (es->smb_enc_type == SMB_TRANS_ENC_NTLM) {
SAFE_FREE(buf);
return;
--
Samba Shared Repository
More information about the samba-cvs
mailing list