CVE-2015-5370: s3:rpc_server: let a failing sec_verification_trailer mark the connect...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c
index 82bc3dfe30aa672c07e96a768c159ed6d5c1628d..610105c52632461489eceb2067b5524359a808a9 100644 (file)
--- a/source3/rpc_server/srv_pipe.c
+++ b/source3/rpc_server/srv_pipe.c
@@ -1243,6 +1243,7 @@ static bool api_pipe_request(struct pipes_struct *p,
 
        if (!srv_pipe_check_verification_trailer(p, pkt, pipe_fns)) {
                DEBUG(1, ("srv_pipe_check_verification_trailer: failed\n"));
+               set_incoming_fault(p);
                setup_fault_pdu(p, NT_STATUS(DCERPC_FAULT_ACCESS_DENIED));
                data_blob_free(&p->out_data.rdata);
                TALLOC_FREE(frame);