CVE-2015-5370: s3:rpc_server: make use of pipe_auth_data->auth_context_id
commita663ad5e255d3b0a14960b7d3da5e6d63829e397
authorStefan Metzmacher <metze@samba.org>
Tue, 7 Jul 2015 22:01:37 +0000 (8 00:01 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:39:50 +0000 (30 04:39 +0200)
tree597247a7b4a9c7003968d32958e69ea4849126f6
parenta3fc86d3912078c445a933d167b4aff63bdeff37
CVE-2015-5370: s3:rpc_server: make use of pipe_auth_data->auth_context_id

This is better than using hardcoded values.
We need to use the value the client used in the BIND request.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source3/rpc_server/rpc_ncacn_np.c
source3/rpc_server/srv_pipe.c