diff options
| author | Stefan Metzmacher <metze@samba.org> | 2013-09-24 05:03:40 +0200 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2013-12-09 07:05:45 +0100 |
| commit | dfd4fc1591f17998bf7b6a867900ed6f1b35ca7c (patch) | |
| tree | 4c4fc4efb2c68ecdafd592d3872265bac4c37092 /source3/librpc | |
| parent | 2fb570abec6d07cee61332cf518703060514d3a0 (diff) | |
| download | samba-dfd4fc1591f17998bf7b6a867900ed6f1b35ca7c.tar.gz samba-dfd4fc1591f17998bf7b6a867900ed6f1b35ca7c.tar.xz samba-dfd4fc1591f17998bf7b6a867900ed6f1b35ca7c.zip | |
CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_next_vector()
We should do this explicit instead of relying on
tstream_readv_pdu_ask_for_next_vector() to catch the overflow.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10185
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Diffstat (limited to 'source3/librpc')
0 files changed, 0 insertions, 0 deletions