diff options
| author | Jeremy Allison <jra@samba.org> | 1999-01-20 19:13:27 +0000 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 1999-01-20 19:13:27 +0000 |
| commit | 9a274b4e760c974f438616dbceb44420ea3ef19d (patch) | |
| tree | 68e1ce4118ade177cf171afa0f003f1d5488c5c5 | |
| parent | 673ec08b13325cd3e87d8ce7eaef421197bf9c39 (diff) | |
| download | samba-9a274b4e760c974f438616dbceb44420ea3ef19d.tar.gz samba-9a274b4e760c974f438616dbceb44420ea3ef19d.tar.xz samba-9a274b4e760c974f438616dbceb44420ea3ef19d.zip | |
Turns out NT can send an NTcancel request with an invalid uid. This can
cause smbd to crash. As we're only removing entries from a queue then
remove the AS_USER flag for reply_ntcancel.
Jeremy.
| -rw-r--r-- | source/smbd/process.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source/smbd/process.c b/source/smbd/process.c index f4ff2e86dab..d857224b21c 100644 --- a/source/smbd/process.c +++ b/source/smbd/process.c @@ -346,7 +346,7 @@ struct smb_message_struct {SMBntcreateX, "SMBntcreateX", reply_ntcreate_and_X, AS_USER | CAN_IPC | QUEUE_IN_OPLOCK }, {SMBnttrans, "SMBnttrans", reply_nttrans, AS_USER | CAN_IPC }, {SMBnttranss, "SMBnttranss", reply_nttranss, AS_USER | CAN_IPC }, - {SMBntcancel, "SMBntcancel", reply_ntcancel, AS_USER }, + {SMBntcancel, "SMBntcancel", reply_ntcancel, 0 }, /* messaging routines */ {SMBsends,"SMBsends",reply_sends,AS_GUEST}, |