When using chained smb requests, it can happen that smbd reads free()ed memory. 5135ebd6f099518f0 is the fix in master, with http://lists.samba.org/archive/samba-technical/2009-August/066031.html Tim Prouty "kindof" acked it. This should go into 3.4.1. Volker
Patch will be in 3.4.1. Closing out bug report. Thanks!