Limit the number of SIDs that may be looked up, in line with existing code

for name->sid.
(This used to be commit 0ebccc0dbeecc10d423529909a2563fbc3bf9857)

diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c
index 1b42c5f141b5512a1cae0e0596568ac5801cc863..fb6538db39f9d8b14fa8ab8bc5945f906b5294f2 100644 (file)
--- a/source3/rpc_server/srv_lsa_nt.c
+++ b/source3/rpc_server/srv_lsa_nt.c
@@ -641,6 +641,11 @@ NTSTATUS _lsa_lookup_sids(pipes_struct *p, LSA_Q_LOOKUP_SIDS *q_u, LSA_R_LOOKUP_
        LSA_TRANS_NAME_ENUM *names = NULL;
        uint32 mapped_count = 0;
 
+       if (num_entries >  MAX_LOOKUP_SIDS) {
+               num_entries = MAX_LOOKUP_SIDS;
+               DEBUG(5,("_lsa_lookup_sids: truncating SID lookup list to %d\n", num_entries));
+       }
+               
        ref = (DOM_R_REF *)talloc_zero(p->mem_ctx, sizeof(DOM_R_REF));
        names = (LSA_TRANS_NAME_ENUM *)talloc_zero(p->mem_ctx, sizeof(LSA_TRANS_NAME_ENUM));