From f435de5917fd52d027c94d68d692b21cd8adc861 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Tue, 13 Jul 2021 21:50:27 +0200
Subject: [PATCH] s3:smbd: only allow cancel with the same session

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
---
 source3/smbd/smb2_server.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 82aa483055b..04f8c4ba10e 100644
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -2408,6 +2408,10 @@ static NTSTATUS smbd_smb2_request_process_cancel(struct smbd_smb2_request *req)
 		uint64_t message_id;
 		uint64_t async_id;
 
+		if (cur->session != req->session) {
+			continue;
+		}
+
 		if (cur->compound_related) {
 			/*
 			 * Never cancel anything in a compound request.
-- 
2.34.1