Bug in SMBwriteC reply

Jeremy Allison jra at samba.org
Sun Jul 10 16:38:35 GMT 2005


On Sun, Jul 10, 2005 at 02:01:24PM +0200, Marcel Müller wrote:
> Hi,
> 
> I found another bug, this time in the LANMAN 1.0 protocol.
> 
> The final reply to SMBwriteBraw does not return the number of bytes written.
> 
> This causes client applications like the OS/2 system Editor (E.EXE) to 
> think that the disk is full. Nevertheless the data is written correctly.
> 
> The reason is in reply.c. The value total_written is copied to the SMB 
> data structure before is has its final value. I have a possible fix 
> attached.

Perfect catch - I've applied this. Thanks. CC: samba-technical next
time to share your fix with the world (then you won't depend on me
to apply it :-).

Thanks,

Jeremy.


More information about the samba-technical mailing list