r17431: Fix bug #4003, reported by dale-keyword-samba.c7b741@codefu.org.

NTcancel doesn't send a reply, so in this case the signing
sequence number is only incremented by 1, not 2.
Jeremy.
(This used to be commit 85841a01987e653a085af00c7c437145686a332b)

diff --git a/source3/libsmb/smb_signing.c b/source3/libsmb/smb_signing.c
index e000d539b49b3f9ec5aae161358f40fa771bf287..e277137e9be2c1833f16be9d09b18d3286f16942 100644 (file)
--- a/source3/libsmb/smb_signing.c
+++ b/source3/libsmb/smb_signing.c
@@ -852,6 +852,9 @@ void srv_cancel_sign_response(uint16 mid)
 
        while (get_sequence_for_reply(&data->outstanding_packet_list, mid, &dummy_seq))
                ;
+
+       /* cancel doesn't send a reply so doesn't burn a sequence number. */
+       data->send_seq_num -= 1;
 }
 
 /***********************************************************