The branch, v3-3-test has been updated
       via  5fd3261... Prevent NULL dereference if group has no members
      from  e3be5dd... Fix bug 7005 - mangle method = hash truncates files with 
dot '. ' character

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -----------------------------------------------------------------
commit 5fd32614f147a045aaee30ed9cf62e42ac6e30d8
Author: Jim McDonough <j...@samba.org>
Date:   Wed Dec 30 18:19:46 2009 -0800

    Prevent NULL dereference if group has no members
    
    Fix bug #7014 (domain mode winbind crashes retriveing empty group members).

-----------------------------------------------------------------------

Summary of changes:
 source/winbindd/winbindd_rpc.c |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/winbindd/winbindd_rpc.c b/source/winbindd/winbindd_rpc.c
index db43559..459a844 100644
--- a/source/winbindd/winbindd_rpc.c
+++ b/source/winbindd/winbindd_rpc.c
@@ -787,16 +787,16 @@ static NTSTATUS lookup_groupmem(struct winbindd_domain 
*domain,
         if (!NT_STATUS_IS_OK(result))
                return result;
 
-       *num_names = rids->count;
-       rid_mem = rids->rids;
-
-       if (!*num_names) {
+       if (!rids || !rids->count) {
                names = NULL;
                name_types = NULL;
                sid_mem = NULL;
                return NT_STATUS_OK;
        }
 
+       *num_names = rids->count;
+       rid_mem = rids->rids;
+
         /* Step #2: Convert list of rids into list of usernames.  Do this
            in bunches of ~1000 to avoid crashing NT4.  It looks like there
            is a buffer overflow or something like that lurking around


-- 
Samba Shared Repository

Reply via email to