summaryrefslogtreecommitdiffstats
path: root/source/smbd/reply.c
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2001-06-05 06:29:57 +0000
committerJeremy Allison <jra@samba.org>2001-06-05 06:29:57 +0000
commit810dae29b8b45e91c0c35a4d96202c08b13d4e82 (patch)
tree76e23d2aae76ac128a42e62297ab29e1ded34d5d /source/smbd/reply.c
parentdbb770ecc6dbbc4c38f31fc6b9747e0d8bc6e155 (diff)
downloadsamba-810dae29b8b45e91c0c35a4d96202c08b13d4e82.tar.gz
samba-810dae29b8b45e91c0c35a4d96202c08b13d4e82.tar.xz
samba-810dae29b8b45e91c0c35a4d96202c08b13d4e82.zip
Deal with incorrect large writes from old NT4.x clients.
We still need to set the large write reply correctly. Jeremy.
Diffstat (limited to 'source/smbd/reply.c')
-rw-r--r--source/smbd/reply.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/source/smbd/reply.c b/source/smbd/reply.c
index 23fedccd88e..7cb23d86297 100644
--- a/source/smbd/reply.c
+++ b/source/smbd/reply.c
@@ -2668,7 +2668,7 @@ int reply_write_and_X(connection_struct *conn, char *inbuf,char *outbuf,int leng
{
files_struct *fsp = file_fsp(inbuf,smb_vwv2);
SMB_OFF_T startpos = IVAL(inbuf,smb_vwv3);
- size_t numtowrite = SVAL(inbuf,smb_vwv10)|(((size_t)SVAL(inbuf,smb_vwv9))<<16);
+ size_t numtowrite = SVAL(inbuf,smb_vwv10);
BOOL write_through = BITSETW(inbuf+smb_vwv7,0);
ssize_t nwritten = -1;
unsigned int smb_doff = SVAL(inbuf,smb_vwv11);
@@ -2686,6 +2686,10 @@ int reply_write_and_X(connection_struct *conn, char *inbuf,char *outbuf,int leng
CHECK_WRITE(fsp);
CHECK_ERROR(fsp);
+ /* Deal with possible LARGE_WRITEX */
+ if (smblen > 0xFFFF)
+ numtowrite |= ((((size_t)SVAL(inbuf,smb_vwv9)) & 1 )<<16);
+
if(smb_doff > smblen || (smb_doff + numtowrite > smblen)) {
END_PROFILE(SMBwriteX);
return(ERROR(ERRDOS,ERRbadmem));