]> git.ipfire.org Git - ipfire-2.x.git/blame - src/patches/samba/1-samba.git-82fa625540abf8b8ec23d43c41e2ca906a9928a5.patch
samba: import rpc server and client fixes.
[ipfire-2.x.git] / src / patches / samba / 1-samba.git-82fa625540abf8b8ec23d43c41e2ca906a9928a5.patch
CommitLineData
c0119cfb
AF
1From 82fa625540abf8b8ec23d43c41e2ca906a9928a5 Mon Sep 17 00:00:00 2001
2From: Andreas Schneider <asn@samba.org>
3Date: Fri, 15 Apr 2016 11:56:08 +0200
4Subject: [PATCH] s3:rpc_server: Fix a regression verifying the security
5 trailer
6
7We do not support header signing so we should not check verify it if a
8client sends the flag.
9
10Signed-off-by: Andreas Schneider <asn@samba.org>
11Reviewed-by: Guenther Deschner <gd@samba.org>
12---
13 source3/rpc_server/srv_pipe.c | 3 +--
14 1 file changed, 1 insertion(+), 2 deletions(-)
15
16diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c
17index d659705..fa354a6 100644
18--- a/source3/rpc_server/srv_pipe.c
19+++ b/source3/rpc_server/srv_pipe.c
20@@ -1552,7 +1552,6 @@ static bool srv_pipe_check_verification_trailer(struct pipes_struct *p,
21 {
22 TALLOC_CTX *frame = talloc_stackframe();
23 struct dcerpc_sec_verification_trailer *vt = NULL;
24- const uint32_t bitmask1 = 0;
25 const struct dcerpc_sec_vt_pcontext pcontext = {
26 .abstract_syntax = pipe_fns->syntax,
27 .transfer_syntax = ndr_transfer_syntax,
28@@ -1573,7 +1572,7 @@ static bool srv_pipe_check_verification_trailer(struct pipes_struct *p,
29 goto done;
30 }
31
32- ret = dcerpc_sec_verification_trailer_check(vt, &bitmask1,
33+ ret = dcerpc_sec_verification_trailer_check(vt, NULL,
34 &pcontext, &header2);
35 done:
36 TALLOC_FREE(frame);
37--
381.9.1
39