The Samba-Bugzilla – Attachment 16100 Details for
Bug 14403
Cannot rename directory to a single character in the root of a share
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
raw patch for master.
look (text/plain), 949 bytes, created by
Jeremy Allison
on 2020-06-30 18:57:14 UTC
(
hide
)
Description:
raw patch for master.
Filename:
MIME Type:
Creator:
Jeremy Allison
Created:
2020-06-30 18:57:14 UTC
Size:
949 bytes
patch
obsolete
>diff --git a/source3/libsmb/cli_smb2_fnum.c b/source3/libsmb/cli_smb2_fnum.c >index e5d6e6b7fbd..76b7577de0e 100644 >--- a/source3/libsmb/cli_smb2_fnum.c >+++ b/source3/libsmb/cli_smb2_fnum.c >@@ -3124,6 +3124,7 @@ NTSTATUS cli_smb2_rename(struct cli_state *cli, > smb_ucs2_t *converted_str = NULL; > size_t converted_size_bytes = 0; > size_t namelen = 0; >+ size_t inbuf_size; > TALLOC_CTX *frame = talloc_stackframe(); > > if (smbXcli_conn_has_async_calls(cli->conn)) { >@@ -3181,8 +3182,16 @@ NTSTATUS cli_smb2_rename(struct cli_state *cli, > } > converted_size_bytes -= 2; > >- inbuf = data_blob_talloc_zero(frame, >- 20 + converted_size_bytes); >+ inbuf_size = 20 + converted_size_bytes; >+ if (inbuf_size < 20) { >+ status = NT_STATUS_INVALID_PARAMETER; >+ goto fail; >+ } >+ if (inbuf_size < 24) { >+ inbuf_size = 24; >+ } >+ >+ inbuf = data_blob_talloc_zero(frame, inbuf_size); > if (inbuf.data == NULL) { > status = NT_STATUS_NO_MEMORY; > goto fail;
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=16100">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 14403
:
16100
|
16103