in the function open_file_shared1 the variable action is used uninitialized. I 
asume that this is a typing error, and the pointer should be NULL protected as 
in line 1385 from open.c.
The problem also exists in the CVS branch.

The patch to correct this problem:
--- source/smbd/open.c.save     2004-07-08 19:06:10.000000000 +0200
+++ source/smbd/open.c  2004-08-24 12:33:16.000000000 +0200
@@ -1024,7 +1024,7 @@
                        ignored */
                if (Access)
                        *Access = DOS_OPEN_WRONLY;
-               if (action)
+               if (paction)
                        *paction = FILE_WAS_CREATED;
                return print_fsp_open(conn, fname);
        }
------------------------ End of patch -----------------------

the file open.c.save is the original file