r17431: Fix bug #4003, reported by dale-keyword-samba.c7b741@codefu.org.
authorJeremy Allison <jra@samba.org>
Sat, 5 Aug 2006 20:05:37 +0000 (20:05 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 16:38:33 +0000 (11:38 -0500)
NTcancel doesn't send a reply, so in this case the signing
sequence number is only incremented by 1, not 2.
Jeremy.
(This used to be commit 85841a01987e653a085af00c7c437145686a332b)

source3/libsmb/smb_signing.c

index e000d539b49b3f9ec5aae161358f40fa771bf287..e277137e9be2c1833f16be9d09b18d3286f16942 100644 (file)
@@ -852,6 +852,9 @@ void srv_cancel_sign_response(uint16 mid)
 
        while (get_sequence_for_reply(&data->outstanding_packet_list, mid, &dummy_seq))
                ;
 
        while (get_sequence_for_reply(&data->outstanding_packet_list, mid, &dummy_seq))
                ;
+
+       /* cancel doesn't send a reply so doesn't burn a sequence number. */
+       data->send_seq_num -= 1;
 }
 
 /***********************************************************
 }
 
 /***********************************************************