s3-dcerpc: Fix miscalculation of buffer start address

This was breaking schannel

diff --git a/source3/rpc_client/cli_pipe.c b/source3/rpc_client/cli_pipe.c
index b9b04b6fe0bdb32636824903dfcfa6b4d2495483..aea6b36e4a1ed20e848c4fa812348a08164ac8b8 100644 (file)
--- a/source3/rpc_client/cli_pipe.c
+++ b/source3/rpc_client/cli_pipe.c
@@ -1004,7 +1004,9 @@ static NTSTATUS cli_pipe_verify_schannel(struct rpc_pipe_client *cli,
                return NT_STATUS_BUFFER_TOO_SMALL;
        }
 
-       blob = data_blob_const(prs_data_p(current_pdu) + prs_offset(current_pdu), auth_len);
+       blob = data_blob_const(prs_data_p(current_pdu) +
+                               prs_offset(current_pdu) +
+                               RPC_HDR_AUTH_LEN, auth_len);
 
        if (DEBUGLEVEL >= 10) {
                dump_NL_AUTH_SIGNATURE(talloc_tos(), &blob);