CVE-2015-5370: s3:librpc/rpc: don't call dcerpc_pull_auth_trailer() if auth_length...
commit2d2243c3383bee5fb138d03381bcce5fe9c8286e
authorStefan Metzmacher <metze@samba.org>
Mon, 29 Jun 2015 08:24:45 +0000 (29 10:24 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:10:04 +0000 (30 04:10 +0200)
treef9d3bf2f0ced2156b11974a07762afa0fd188170
parentfce895b228ece579ccf8b911b67f5835e11f3fa4
CVE-2015-5370: s3:librpc/rpc: don't call dcerpc_pull_auth_trailer() if auth_length is 0

All other paranoia checks are done within dcerpc_pull_auth_trailer()
now.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source3/librpc/rpc/dcerpc_helpers.c