summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2007-04-23 21:40:54 +0000
committerJeremy Allison <jra@samba.org>2007-04-23 21:40:54 +0000
commit690eaf8d788c1e636d7b625248147edef488b47c (patch)
tree2c03ac3f56adc63fca51457a14e25c30439ca001
parent409301276d25f547c16b62cc173af5c9436f4e10 (diff)
downloadsamba-690eaf8d788c1e636d7b625248147edef488b47c.tar.gz
samba-690eaf8d788c1e636d7b625248147edef488b47c.tar.xz
samba-690eaf8d788c1e636d7b625248147edef488b47c.zip
r22493: Fix horrible memory corruption bug with CIFS POSIX open/mkidr.
Found by SteveF + valgrind :-). Jerry - essential for rc3. Jeremy.
-rw-r--r--source/smbd/trans2.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/source/smbd/trans2.c b/source/smbd/trans2.c
index 9b5d47688cd..89ae25caf7f 100644
--- a/source/smbd/trans2.c
+++ b/source/smbd/trans2.c
@@ -5382,6 +5382,7 @@ static NTSTATUS smb_posix_mkdir(connection_struct *conn,
*pdata_return_size = 0;
return NT_STATUS_NO_MEMORY;
}
+ pdata = *ppdata;
SSVAL(pdata,0,NO_OPLOCK_RETURN);
SSVAL(pdata,2,0); /* No fnum. */
@@ -5558,6 +5559,7 @@ static NTSTATUS smb_posix_open(connection_struct *conn,
*pdata_return_size = 0;
return NT_STATUS_NO_MEMORY;
}
+ pdata = *ppdata;
if (extended_oplock_granted) {
if (flags & REQUEST_BATCH_OPLOCK) {