src/patches/samba/1-samba.git-82fa625540abf8b8ec23d43c41e2ca906a9928a5.patch

   1 From 82fa625540abf8b8ec23d43c41e2ca906a9928a5 Mon Sep 17 00:00:00 2001
   2 From: Andreas Schneider <asn@samba.org>
   3 Date: Fri, 15 Apr 2016 11:56:08 +0200
   4 Subject: [PATCH] s3:rpc_server: Fix a regression verifying the security
   5  trailer
   6
   7 We do not support header signing so we should not check verify it if a
   8 client sends the flag.
   9
  10 Signed-off-by: Andreas Schneider <asn@samba.org>
  11 Reviewed-by: Guenther Deschner <gd@samba.org>
  12 ---
  13  source3/rpc_server/srv_pipe.c | 3 +--
  14  1 file changed, 1 insertion(+), 2 deletions(-)
  15
  16 diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c
  17 index d659705..fa354a6 100644
  18 --- a/source3/rpc_server/srv_pipe.c
  19 +++ b/source3/rpc_server/srv_pipe.c
  20 @@ -1552,7 +1552,6 @@ static bool srv_pipe_check_verification_trailer(struct pipes_struct *p,
  21  {
  22         TALLOC_CTX *frame = talloc_stackframe();
  23         struct dcerpc_sec_verification_trailer *vt = NULL;
  24 -       const uint32_t bitmask1 = 0;
  25         const struct dcerpc_sec_vt_pcontext pcontext = {
  26                 .abstract_syntax = pipe_fns->syntax,
  27                 .transfer_syntax = ndr_transfer_syntax,
  28 @@ -1573,7 +1572,7 @@ static bool srv_pipe_check_verification_trailer(struct pipes_struct *p,
  29                 goto done;
  30         }
  31
  32 -       ret = dcerpc_sec_verification_trailer_check(vt, &bitmask1,
  33 +       ret = dcerpc_sec_verification_trailer_check(vt, NULL,
  34                                                     &pcontext, &header2);
  35  done:
  36         TALLOC_FREE(frame);
  37 --
  38 1.9.1
  39