From 23998e1da83c77c16ff4d33529b8dab38005b001 Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Fri, 10 Aug 2007 21:34:55 +0000 Subject: r24320: Fix the wct checks in reply_trans2 and the reply_trans calls No idea what I've been smoking here. Thanks to Stefan for closely looking (This used to be commit 708f5af2e8c10d9a0d0027e3c31fa23689e746b8) --- source3/smbd/ipc.c | 4 ++-- source3/smbd/trans2.c | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) (limited to 'source3') diff --git a/source3/smbd/ipc.c b/source3/smbd/ipc.c index b13c18a5905..24037069292 100644 --- a/source3/smbd/ipc.c +++ b/source3/smbd/ipc.c @@ -488,7 +488,7 @@ void reply_trans(connection_struct *conn, struct smb_request *req) START_PROFILE(SMBtrans); - if (SVAL(req->inbuf, smb_wct) < 10) { + if (req->wct < 14) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtrans); return; @@ -667,7 +667,7 @@ void reply_transs(connection_struct *conn, struct smb_request *req) show_msg((char *)req->inbuf); - if (req->wct < 10) { + if (req->wct < 8) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtranss); return; diff --git a/source3/smbd/trans2.c b/source3/smbd/trans2.c index 26769e53d6d..f65d833ab06 100644 --- a/source3/smbd/trans2.c +++ b/source3/smbd/trans2.c @@ -7028,7 +7028,7 @@ void reply_trans2(connection_struct *conn, struct smb_request *req) START_PROFILE(SMBtrans2); - if (req->wct < 8) { + if (req->wct < 14) { reply_nterror(req, NT_STATUS_INVALID_PARAMETER); END_PROFILE(SMBtrans2); return; -- cgit