From: Volker Lendecke <vl@samba.org>
Date: Wed, 13 Aug 2008 17:57:19 +0000 (+0200)
Subject: Protect against short read&x replies
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4ed73cbbbeff4b554cc8d28252b756241396b3a1;p=thirdparty%2Fsamba.git

Protect against short read&x replies
---

diff --git a/source/libsmb/clireadwrite.c b/source/libsmb/clireadwrite.c
index a57f1e07857..4d3027694f9 100644
--- a/source/libsmb/clireadwrite.c
+++ b/source/libsmb/clireadwrite.c
@@ -138,6 +138,10 @@ NTSTATUS cli_read_andx_recv(struct async_req *req, ssize_t *received,
 		return status;
 	}
 
+	if (wct < 12) {
+		return NT_STATUS_INVALID_NETWORK_RESPONSE;
+	}
+
 	/* size is the number of bytes the server returned.
 	 * Might be zero. */
 	size = SVAL(cli_req->inbuf, smb_vwv5);