| commit | 9d994c2733952bf1f84a3828722005902889f99b | |
| author | Stefan Metzmacher <metze@samba.org> | |
| Tue, 24 Sep 2013 03:03:40 +0000 (24 05:03 +0200) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Thu, 5 Dec 2013 09:54:15 +0000 (5 10:54 +0100) | ||
| tree | 69de5d2d5f1e62a91957890f50141dea9b044a08 | treesnapshot (tar.gz zip) |
| parent | e2096069e6e775be2d39cfbed009315ad7cbd39a | commitdiff |
CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_next_vector()
We should do this explicit instead of relying on
tstream_readv_pdu_ask_for_next_vector() to catch the overflow.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10185
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
We should do this explicit instead of relying on
tstream_readv_pdu_ask_for_next_vector() to catch the overflow.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10185
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
| librpc/rpc/dcerpc_util.c | diffblobblamehistory |