diff options
| author | Jeremy Allison <jra@samba.org> | 2004-11-10 20:37:14 +0000 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2004-11-10 20:37:14 +0000 |
| commit | d9a8a720780a2c4f6cac7199cc05470717d08171 (patch) | |
| tree | 647eb8ac3e964b1f2b74cd25f06afa1d3754d8b9 /source/smbd/ipc.c | |
| parent | ac1714f49b8c5cec91d7609a5fe581075cd7d368 (diff) | |
| download | samba-d9a8a720780a2c4f6cac7199cc05470717d08171.tar.gz samba-d9a8a720780a2c4f6cac7199cc05470717d08171.tar.xz samba-d9a8a720780a2c4f6cac7199cc05470717d08171.zip | |
r3666: Generalise fix for trans and nttrans multi-fragment requests.
Jeremy
Diffstat (limited to 'source/smbd/ipc.c')
| -rw-r--r-- | source/smbd/ipc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/source/smbd/ipc.c b/source/smbd/ipc.c index e5465b902c8..35e670c9fa1 100644 --- a/source/smbd/ipc.c +++ b/source/smbd/ipc.c @@ -502,7 +502,7 @@ int reply_trans(connection_struct *conn, char *inbuf,char *outbuf, int size, int goto bad_param; if (pcnt) { - if (pdisp+pcnt >= tpscnt) + if (pdisp+pcnt > tpscnt) goto bad_param; if ((pdisp+pcnt < pdisp) || (pdisp+pcnt < pcnt)) goto bad_param; @@ -518,7 +518,7 @@ int reply_trans(connection_struct *conn, char *inbuf,char *outbuf, int size, int } if (dcnt) { - if (ddisp+dcnt >= tdscnt) + if (ddisp+dcnt > tdscnt) goto bad_param; if ((ddisp+dcnt < ddisp) || (ddisp+dcnt < dcnt)) goto bad_param; |