From: Volker Lendecke <vl@samba.org>
Date: Wed, 13 Aug 2008 17:57:19 +0000 (+0200)
Subject: Protect against short read&x replies
X-Git-Url: http://git.samba.org/samba.git/?a=commitdiff_plain;h=56cd17dfe145c2df2b39ad295136c4922bee8e43;p=jra%2Fsamba%2F.git

Protect against short read&x replies
(This used to be commit 4ed73cbbbeff4b554cc8d28252b756241396b3a1)
---

diff --git a/source3/libsmb/clireadwrite.c b/source3/libsmb/clireadwrite.c
index a57f1e07857..4d3027694f9 100644
--- a/source3/libsmb/clireadwrite.c
+++ b/source3/libsmb/clireadwrite.c
@@ -138,6 +138,10 @@ NTSTATUS cli_read_andx_recv(struct async_req *req, ssize_t *received,
 		return status;
 	}
 
+	if (wct < 12) {
+		return NT_STATUS_INVALID_NETWORK_RESPONSE;
+	}
+
 	/* size is the number of bytes the server returned.
 	 * Might be zero. */
 	size = SVAL(cli_req->inbuf, smb_vwv5);