CVE-2016-2019: s3:libsmb: add comment regarding smbXcli_session_is_guest() with manda...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11860

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/libsmb/cliconnect.c b/source3/libsmb/cliconnect.c
index ea92c8f092dc436cb9a23930029e714bc559cc6a..ebba8f206e09c923d523f92f32d6ca63c2486650 100644 (file)
--- a/source3/libsmb/cliconnect.c
+++ b/source3/libsmb/cliconnect.c
@@ -1588,6 +1588,9 @@ static void cli_session_setup_gensec_remote_done(struct tevent_req *subreq)
                         * have a negotiated session key.
                         *
                         * So just pretend we are completely done.
+                        *
+                        * Note that smbXcli_session_is_guest()
+                        * always returns false if we require signing.
                         */
                        state->blob_in = data_blob_null;
                        state->local_ready = true;