The Samba-Bugzilla – Attachment 5501 Details for
Bug 7254
An uninitialized variable read could cause an smbd crash; CVE-2010-1642
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
git am patch.
0001-s3-Fix-an-uninitialized-variable-read.patch (text/plain), 864 bytes, created by
Jeremy Allison
on 2010-03-15 18:05:30 UTC
(
hide
)
Description:
git am patch.
Filename:
MIME Type:
Creator:
Jeremy Allison
Created:
2010-03-15 18:05:30 UTC
Size:
864 bytes
patch
obsolete
>From f922ddd5d55e0441a199e6e3866e4c2b19459c84 Mon Sep 17 00:00:00 2001 >From: Volker Lendecke <vl@samba.org> >Date: Sun, 14 Mar 2010 21:18:34 +0100 >Subject: [PATCH] s3: Fix an uninitialized variable read > >Found by Laurent Gaffie <laurent.gaffie@gmail.com> > >Thanks for that, > >Volker >--- > source3/smbd/sesssetup.c | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > >diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c >index cad2dd3..8c0317a 100644 >--- a/source3/smbd/sesssetup.c >+++ b/source3/smbd/sesssetup.c >@@ -1214,7 +1214,7 @@ static void reply_sesssetup_and_X_spnego(struct smb_request *req) > file_save("negotiate.dat", blob1.data, blob1.length); > #endif > >- p2 = (char *)req->buf + data_blob_len; >+ p2 = (char *)req->buf + blob1.length; > > p2 += srvstr_pull_req_talloc(talloc_tos(), req, &tmp, p2, > STR_TERMINATE); >-- >1.6.0.4 >
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=5501">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 7254
: 5501