diff options
| author | Volker Lendecke <vl@samba.org> | 2014-02-07 16:37:38 +0100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2014-02-14 20:05:47 +0100 |
| commit | 3f09c5ca2b281b6eb6b3eeb1170d79c5a42a361a (patch) | |
| tree | 0389f4a1fdc0ddbb9802bd6c758272cad9099fd9 /source3/smbd | |
| parent | dc582961b6a293983952ad0e8acf250e6ceb5886 (diff) | |
| download | samba-3f09c5ca2b281b6eb6b3eeb1170d79c5a42a361a.tar.gz | |
smbd: Fix memory overwrites
SIVAL writes 32 bit, not 16
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Fri Feb 7 20:07:23 CET 2014 on sn-devel-104
(cherry picked from commit 9088bde059e93a84745ec2158e2e640b5bb13844)
Fix bug #10415 - *** glibc detected *** /usr/sbin/smbd: free(): invalid next
size (fast).
Diffstat (limited to 'source3/smbd')
| -rw-r--r-- | source3/smbd/smb2_ioctl_network_fs.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/source3/smbd/smb2_ioctl_network_fs.c b/source3/smbd/smb2_ioctl_network_fs.c index 1e1e3e5e94..8757e74c67 100644 --- a/source3/smbd/smb2_ioctl_network_fs.c +++ b/source3/smbd/smb2_ioctl_network_fs.c @@ -394,8 +394,8 @@ static NTSTATUS fsctl_validate_neg_info(TALLOC_CTX *mem_ctx, SIVAL(out_output->data, 0x00, conn->smb2.server.capabilities); memcpy(out_output->data+0x04, out_guid_blob.data, 16); - SIVAL(out_output->data, 0x14, conn->smb2.server.security_mode); - SIVAL(out_output->data, 0x16, conn->smb2.server.dialect); + SSVAL(out_output->data, 0x14, conn->smb2.server.security_mode); + SSVAL(out_output->data, 0x16, conn->smb2.server.dialect); return NT_STATUS_OK; } |