CVE-2015-5370: s3:rpc_server: make use of pipe_auth_data->auth_context_id
commitbc001b09b0213ac1a3c6171d6a9250a924213d67
authorStefan Metzmacher <metze@samba.org>
Tue, 7 Jul 2015 22:01:37 +0000 (8 00:01 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:21:41 +0000 (30 04:21 +0200)
treee1ed826ef32614ffb0128de6d0f867345c8132cc
parent7ab9a8c3b224052c7422ebd02fe83171ed999688
CVE-2015-5370: s3:rpc_server: make use of pipe_auth_data->auth_context_id

This is better than using hardcoded values.
We need to use the value the client used in the BIND request.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source3/rpc_server/rpc_ncacn_np.c
source3/rpc_server/srv_pipe.c