[SCM] Samba Shared Repository - branch master updated

Andreas Schneider asn at samba.org
Mon Aug 2 08:43:08 MDT 2010


The branch, master has been updated
       via  d3fff45... s3-spoolss: Fixed a segfault if a value has no data.
       via  307bd43... s3-spoolss: Move some debug message to a higher level.
       via  4412baf... s3-spoolss: Fixed some C++ build warnings.
       via  772fbce... s3-spoolss: Use a stackframe to allocat memory.
      from  6463281... s4-smbtorture: remove another old and now invalid s3 special case during spoolss testing.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit d3fff4590420a3b2d1858e6c8dbaf4df93447a46
Author: Andreas Schneider <asn at samba.org>
Date:   Mon Aug 2 13:49:59 2010 +0200

    s3-spoolss: Fixed a segfault if a value has no data.

commit 307bd439d7f5df828923189c02fcbe30124d1e01
Author: Andreas Schneider <asn at samba.org>
Date:   Mon Aug 2 13:21:47 2010 +0200

    s3-spoolss: Move some debug message to a higher level.

commit 4412bafa4460bbafe2170f980e8ce88937422529
Author: Andreas Schneider <asn at samba.org>
Date:   Mon Aug 2 12:38:57 2010 +0200

    s3-spoolss: Fixed some C++ build warnings.

commit 772fbce9ffd7ec9de7d33e29d96852dce7f35c43
Author: Andreas Schneider <asn at samba.org>
Date:   Mon Aug 2 12:09:03 2010 +0200

    s3-spoolss: Use a stackframe to allocat memory.
    
    This is faster and should be more secure to use if something goes wrong.

-----------------------------------------------------------------------

Summary of changes:
 source3/rpc_server/srv_spoolss_nt.c   |    2 +-
 source3/rpc_server/srv_spoolss_util.c |   75 +++++++++++++++++----------------
 2 files changed, 40 insertions(+), 37 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/srv_spoolss_nt.c b/source3/rpc_server/srv_spoolss_nt.c
index 1d9632f..b62a7c0 100644
--- a/source3/rpc_server/srv_spoolss_nt.c
+++ b/source3/rpc_server/srv_spoolss_nt.c
@@ -528,7 +528,7 @@ static bool set_printer_hnd_name(TALLOC_CTX *mem_ctx,
 					    sname,
 					    &info2);
 		if ( !W_ERROR_IS_OK(result) ) {
-			DEBUG(0,("set_printer_hnd_name: failed to lookup printer [%s] -- result [%s]\n",
+			DEBUG(2,("set_printer_hnd_name: failed to lookup printer [%s] -- result [%s]\n",
 				 sname, win_errstr(result)));
 			continue;
 		}
diff --git a/source3/rpc_server/srv_spoolss_util.c b/source3/rpc_server/srv_spoolss_util.c
index c5fad1a..3a9523c 100644
--- a/source3/rpc_server/srv_spoolss_util.c
+++ b/source3/rpc_server/srv_spoolss_util.c
@@ -397,7 +397,7 @@ static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 	WERROR result = WERR_OK;
 	NTSTATUS status;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -443,7 +443,7 @@ static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 		struct spoolss_PrinterEnumValues val;
 		struct winreg_ValNameBuf name_buf;
 		enum winreg_Type type = REG_NONE;
-		uint8_t *data = NULL;
+		uint8_t *data;
 		uint32_t data_size;
 		uint32_t length;
 		char n = '\0';;
@@ -453,7 +453,10 @@ static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 		name_buf.length = 0;
 
 		data_size = max_valbufsize;
-		data = (uint8_t *) TALLOC(tmp_ctx, data_size);
+		data = NULL;
+		if (data_size) {
+			data = (uint8_t *) TALLOC(tmp_ctx, data_size);
+		}
 		length = 0;
 
 		status = rpccli_winreg_EnumValue(pipe_handle,
@@ -463,7 +466,7 @@ static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 						 &name_buf,
 						 &type,
 						 data,
-						 &data_size,
+						 data_size ? &data_size : NULL,
 						 &length,
 						 &result);
 		if (W_ERROR_EQUAL(result, WERR_NO_MORE_ITEMS) ) {
@@ -557,7 +560,7 @@ static WERROR winreg_printer_enumkeys(TALLOC_CTX *mem_ctx,
 	WERROR result = WERR_OK;
 	NTSTATUS status;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -1323,7 +1326,7 @@ WERROR winreg_create_printer(TALLOC_CTX *mem_ctx,
 	WERROR result = WERR_OK;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -1630,7 +1633,7 @@ WERROR winreg_update_printer(TALLOC_CTX *mem_ctx,
 	WERROR result = WERR_OK;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -1962,7 +1965,7 @@ WERROR winreg_get_printer(TALLOC_CTX *mem_ctx,
 	WERROR result = WERR_OK;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -1983,7 +1986,7 @@ WERROR winreg_get_printer(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_get_printer: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_get_printer: Could not open key %s: %s\n",
 			  path, win_errstr(result)));
 		goto done;
 	}
@@ -2251,7 +2254,7 @@ WERROR winreg_get_printer_secdesc(TALLOC_CTX *mem_ctx,
 	TALLOC_CTX *tmp_ctx;
 	WERROR result;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2407,7 +2410,7 @@ WERROR winreg_set_printer_secdesc(TALLOC_CTX *mem_ctx,
 	TALLOC_CTX *tmp_ctx;
 	WERROR result;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2533,7 +2536,7 @@ WERROR winreg_set_printer_dataex(TALLOC_CTX *mem_ctx,
 	NTSTATUS status;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2621,7 +2624,7 @@ WERROR winreg_get_printer_dataex(TALLOC_CTX *mem_ctx,
 	NTSTATUS status;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2645,7 +2648,7 @@ WERROR winreg_get_printer_dataex(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_get_printer_dataex: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_get_printer_dataex: Could not open key %s: %s\n",
 			  key, win_errstr(result)));
 		goto done;
 	}
@@ -2741,7 +2744,7 @@ WERROR winreg_enum_printer_dataex(TALLOC_CTX *mem_ctx,
 
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2762,7 +2765,7 @@ WERROR winreg_enum_printer_dataex(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_enum_printer_dataex: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_enum_printer_dataex: Could not open key %s: %s\n",
 			  key, win_errstr(result)));
 		goto done;
 	}
@@ -2815,7 +2818,7 @@ WERROR winreg_delete_printer_dataex(TALLOC_CTX *mem_ctx,
 
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2894,7 +2897,7 @@ WERROR winreg_enum_printer_key(TALLOC_CTX *mem_ctx,
 
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -2918,7 +2921,7 @@ WERROR winreg_enum_printer_key(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_enum_printer_key: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_enum_printer_key: Could not open key %s: %s\n",
 			  key, win_errstr(result)));
 		goto done;
 	}
@@ -2968,7 +2971,7 @@ WERROR winreg_delete_printer_key(TALLOC_CTX *mem_ctx,
 	WERROR result;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3053,7 +3056,7 @@ WERROR winreg_printer_update_changeid(TALLOC_CTX *mem_ctx,
 	WERROR result;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3119,7 +3122,7 @@ WERROR winreg_printer_get_changeid(TALLOC_CTX *mem_ctx,
 	WERROR result;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3143,7 +3146,7 @@ WERROR winreg_printer_get_changeid(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_printer_get_changeid: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_printer_get_changeid: Could not open key %s: %s\n",
 			  path, win_errstr(result)));
 		goto done;
 	}
@@ -3201,7 +3204,7 @@ WERROR winreg_printer_addform1(TALLOC_CTX *mem_ctx,
 	NTSTATUS status;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3301,7 +3304,7 @@ WERROR winreg_printer_enumforms1(TALLOC_CTX *mem_ctx,
 	WERROR result;
 	TALLOC_CTX *tmp_ctx;
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3374,7 +3377,7 @@ WERROR winreg_printer_enumforms1(TALLOC_CTX *mem_ctx,
 		val.info1.area.right  = IVAL(enum_values[i].data->data, 16);
 		val.info1.area.bottom = IVAL(enum_values[i].data->data, 20);
 		/* skip form index      IVAL(enum_values[i].data->data, 24)));*/
-		val.info1.flags       = IVAL(enum_values[i].data->data, 28);
+		val.info1.flags       = (enum spoolss_FormFlags) IVAL(enum_values[i].data->data, 28);
 
 		info[i + num_builtin] = val;
 	}
@@ -3419,7 +3422,7 @@ WERROR winreg_printer_deleteform1(TALLOC_CTX *mem_ctx,
 		}
 	}
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3504,7 +3507,7 @@ WERROR winreg_printer_setform1(TALLOC_CTX *mem_ctx,
 		}
 	}
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3609,7 +3612,7 @@ WERROR winreg_printer_getform1(TALLOC_CTX *mem_ctx,
 		}
 	}
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3627,7 +3630,7 @@ WERROR winreg_printer_getform1(TALLOC_CTX *mem_ctx,
 					&hive_hnd,
 					&key_hnd);
 	if (!W_ERROR_IS_OK(result)) {
-		DEBUG(0, ("winreg_printer_getform1: Could not open key %s: %s\n",
+		DEBUG(2, ("winreg_printer_getform1: Could not open key %s: %s\n",
 			  TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
 		goto done;
 	}
@@ -3697,7 +3700,7 @@ WERROR winreg_printer_getform1(TALLOC_CTX *mem_ctx,
 	r->area.right  = IVAL(data_in, 16);
 	r->area.bottom = IVAL(data_in, 20);
 	/* skip index    IVAL(data_in, 24)));*/
-	r->flags       = IVAL(data_in, 28);
+	r->flags       = (enum spoolss_FormFlags) IVAL(data_in, 28);
 
 	result = WERR_OK;
 done:
@@ -3736,7 +3739,7 @@ WERROR winreg_add_driver(TALLOC_CTX *mem_ctx,
 		goto done;
 	}
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -3960,7 +3963,7 @@ WERROR winreg_get_driver(TALLOC_CTX *mem_ctx,
 	ZERO_STRUCT(key_hnd);
 	ZERO_STRUCT(i8);
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -4047,7 +4050,7 @@ WERROR winreg_get_driver(TALLOC_CTX *mem_ctx,
 
 		result = winreg_enumval_to_dword(info8, v,
 						 "Version",
-						 &info8->version);
+						 (uint32_t *) &info8->version);
 		CHECK_ERROR(result);
 
 		result = winreg_enumval_to_sz(info8, v,
@@ -4215,7 +4218,7 @@ WERROR winreg_del_driver(TALLOC_CTX *mem_ctx,
 	ZERO_STRUCT(hive_hnd);
 	ZERO_STRUCT(key_hnd);
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}
@@ -4306,7 +4309,7 @@ WERROR winreg_get_driver_list(TALLOC_CTX *mem_ctx,
 	ZERO_STRUCT(hive_hnd);
 	ZERO_STRUCT(key_hnd);
 
-	tmp_ctx = talloc_new(mem_ctx);
+	tmp_ctx = talloc_stackframe();
 	if (tmp_ctx == NULL) {
 		return WERR_NOMEM;
 	}


-- 
Samba Shared Repository


More information about the samba-cvs mailing list