git.samba.org / sfrench / samba-autobuild / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f87e70a) | patch
vfs_fruit: check offset and length for AFP_AfpInfo read requests
authorRalph Boehme <slow@samba.org>
Thu, 25 Jun 2015 13:42:04 +0000 (15:42 +0200)
committerRalph Böhme <slow@samba.org>
Thu, 2 Jul 2015 20:45:10 +0000 (22:45 +0200)
commit25f302a47c3119d454531dc992183552b9a42b13
tree4b77f21c0a972ad67e6c489e9ba4d8f176506bebtree
parentf87e70a93028cb64ed4793cb1db6b978fa917697commit | diff
vfs_fruit: check offset and length for AFP_AfpInfo read requests

fruit_pread doesn't check the offset and length parameters and instead
always writes 60 bytes, the size of the AFP_AfpInfo blob, to the the
passed buffer. If the passed in buffer is smaller, we overwrite
something somewhere.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11363

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
source3/modules/vfs_fruit.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.