Get the sense of the integer wrap test the right way around. Sorry.
authorJeremy Allison <jra@samba.org>
Fri, 6 Mar 2009 06:00:22 +0000 (22:00 -0800)
committerJeremy Allison <jra@samba.org>
Fri, 6 Mar 2009 06:00:22 +0000 (22:00 -0800)
Jeremy.

source3/rpc_server/srv_pipe.c

index 6becfa4..f3ee18d 100644 (file)
@@ -2114,7 +2114,7 @@ bool api_pipe_schannel_process(pipes_struct *p, prs_struct *rpc_in, uint32 *p_ss
        auth_len = p->hdr.auth_len;
 
        if (auth_len < RPC_AUTH_SCHANNEL_SIGN_OR_SEAL_CHK_LEN ||
-                       auth_len < RPC_HEADER_LEN +
+                       auth_len > RPC_HEADER_LEN +
                                        RPC_HDR_REQ_LEN +
                                        RPC_HDR_AUTH_LEN +
                                        auth_len) {