diff options
| author | Jeremy Allison <jra@samba.org> | 2008-05-28 09:31:42 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2008-05-28 09:31:42 -0700 |
| commit | 23b825e9d2c74c5b940cf4d3aa56c18692259972 (patch) | |
| tree | 69fb8eeaffa0ee75da26d32bd1ca940428cb0a38 /source/client | |
| parent | 177955141247a4eb56ba0d82dc1add7f52175c40 (diff) | |
| download | samba-23b825e9d2c74c5b940cf4d3aa56c18692259972.tar.gz samba-23b825e9d2c74c5b940cf4d3aa56c18692259972.tar.xz samba-23b825e9d2c74c5b940cf4d3aa56c18692259972.zip | |
Security fix for CVE-2008-1105: Boundary failure when parsing SMB responses
can result in a buffer overrun.
Jeremy.
Diffstat (limited to 'source/client')
| -rw-r--r-- | source/client/client.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source/client/client.c b/source/client/client.c index cc0da18d4d3..8c939fc3ec6 100644 --- a/source/client/client.c +++ b/source/client/client.c @@ -4382,7 +4382,7 @@ static void readline_callback(void) set_smb_read_error(&cli->smb_rw_error, SMB_READ_OK); - status = receive_smb_raw(cli->fd, cli->inbuf, 0, 0, &len); + status = receive_smb_raw(cli->fd, cli->inbuf, cli->bufsize, 0, 0, &len); if (!NT_STATUS_IS_OK(status)) { DEBUG(0, ("Read from server failed, maybe it closed " |