s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in

cli_pipe_verify_schannel().

Guenther

diff --git a/source3/rpc_client/cli_pipe.c b/source3/rpc_client/cli_pipe.c
index a667a9fb13afb9c4a968c8beb8b03e0ee1edf391..d71c561625a9e1fd1fca64bbbd4b3c4f3f149fa1 100644 (file)
--- a/source3/rpc_client/cli_pipe.c
+++ b/source3/rpc_client/cli_pipe.c
@@ -720,7 +720,7 @@ static NTSTATUS cli_pipe_verify_schannel(struct rpc_pipe_client *cli, RPC_HDR *p
                return NT_STATUS_BUFFER_TOO_SMALL;
        }
 
                return NT_STATUS_BUFFER_TOO_SMALL;
        }
 

-       blob = data_blob_const(prs_data_p(current_pdu) + prs_offset(current_pdu), data_len);
+       blob = data_blob_const(prs_data_p(current_pdu) + prs_offset(current_pdu), auth_len);

 
        ndr_err = ndr_pull_struct_blob(&blob, talloc_tos(), NULL, &schannel_chk,
                               (ndr_pull_flags_fn_t)ndr_pull_NL_AUTH_SIGNATURE);
 
        ndr_err = ndr_pull_struct_blob(&blob, talloc_tos(), NULL, &schannel_chk,
                               (ndr_pull_flags_fn_t)ndr_pull_NL_AUTH_SIGNATURE);