From: Volker Lendecke <vl@samba.org>
Date: Sun, 14 Mar 2010 20:18:34 +0000 (+0100)
Subject: s3: Fix an uninitialized variable read
X-Git-Url: http://git.samba.org/?p=samba.git;a=commitdiff_plain;h=9280051bfba33745

s3: Fix an uninitialized variable read

Found by Laurent Gaffie <laurent.gaffie@gmail.com>

Thanks for that,

Volker

Fix bug #7254 (An uninitialized variable read could cause an smbd crash).
---

diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 1529166d436..68cb8d3a267 100644
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -1213,7 +1213,7 @@ static void reply_sesssetup_and_X_spnego(struct smb_request *req)
 	file_save("negotiate.dat", blob1.data, blob1.length);
 #endif
 
-	p2 = (char *)req->buf + data_blob_len;
+	p2 = (char *)req->buf + blob1.length;
 
 	p2 += srvstr_pull_req_talloc(talloc_tos(), req, &tmp, p2,
 				     STR_TERMINATE);