Parinoia fixes from HEAD - malloc() some extra room after the allocated

buffer size.

diff --git a/source/libsmb/clientgen.c b/source/libsmb/clientgen.c
index 3cae643c382985b6a842b4cbc1be1d2d72623b95..d96919308942d1fdb5fa4afc249d9bf15a02f09e 100644 (file)
--- a/source/libsmb/clientgen.c
+++ b/source/libsmb/clientgen.c
@@ -245,8 +245,8 @@ struct cli_state *cli_initialise(struct cli_state *cli)
        cli->timeout = 20000; /* Timeout is in milliseconds. */
        cli->bufsize = CLI_BUFFER_SIZE+4;
        cli->max_xmit = cli->bufsize;
-       cli->outbuf = (char *)malloc(cli->bufsize);
-       cli->inbuf = (char *)malloc(cli->bufsize);
+       cli->outbuf = (char *)malloc(cli->bufsize+SAFETY_MARGIN);
+       cli->inbuf = (char *)malloc(cli->bufsize+SAFETY_MARGIN);
        cli->oplock_handler = cli_oplock_ack;
 
        cli->use_spnego = lp_client_use_spnego();