Re-run make idl.
authorGünther Deschner <gd@samba.org>
Thu, 14 Feb 2008 13:36:30 +0000 (14:36 +0100)
committerGünther Deschner <gd@samba.org>
Thu, 14 Feb 2008 13:40:26 +0000 (14:40 +0100)
Guenther
(This used to be commit 5137ebe068c32ce7cb204cff049ba7f7f2d86abc)

source3/librpc/gen_ndr/ndr_lsa.c

index 12544b1b721c1e136f20a53cda9a14f3b239556f..a95665f0fa806b205ce48d1926283e97865affde 100644 (file)
@@ -3288,6 +3288,9 @@ static enum ndr_err_code ndr_pull_lsa_RightSet(struct ndr_pull *ndr, int ndr_fla
        if (ndr_flags & NDR_SCALARS) {
                NDR_CHECK(ndr_pull_align(ndr, 4));
                NDR_CHECK(ndr_pull_uint32(ndr, NDR_SCALARS, &r->count));
+               if (r->count < 0 || r->count > 256) {
+                       return ndr_pull_error(ndr, NDR_ERR_RANGE, "value out of range");
+               }
                NDR_CHECK(ndr_pull_generic_ptr(ndr, &_ptr_names));
                if (_ptr_names) {
                        NDR_PULL_ALLOC(ndr, r->names);