r12619: make sure we don't return more than 25 addresses, as w2k3 crashes in that...

I still need to make sure we didn't write such records to our database...

metze

diff --git a/source/nbt_server/wins/winsdb.c b/source/nbt_server/wins/winsdb.c
index 47abcd4a630b3f3e582e104c940ef1270f0a4037..9131a70c0762f3ec0bdeea962f7a9602ac9e64ed 100644 (file)
--- a/source/nbt_server/wins/winsdb.c
+++ b/source/nbt_server/wins/winsdb.c
@@ -479,6 +479,10 @@ NTSTATUS winsdb_record(struct winsdb_handle *h, struct ldb_message *msg, TALLOC_
                        goto failed;
                }
        }
+       if (num_values > 25) {
+               status = NT_STATUS_INTERNAL_DB_CORRUPTION;
+               goto failed;
+       }
 
        rec->addresses     = talloc_array(rec, struct winsdb_addr *, num_values+1);
        if (rec->addresses == NULL) {