The branch, v3-3-test has been updated via 5fd3261... Prevent NULL dereference if group has no members from e3be5dd... Fix bug 7005 - mangle method = hash truncates files with dot '. ' character
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log ----------------------------------------------------------------- commit 5fd32614f147a045aaee30ed9cf62e42ac6e30d8 Author: Jim McDonough <j...@samba.org> Date: Wed Dec 30 18:19:46 2009 -0800 Prevent NULL dereference if group has no members Fix bug #7014 (domain mode winbind crashes retriveing empty group members). ----------------------------------------------------------------------- Summary of changes: source/winbindd/winbindd_rpc.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/winbindd_rpc.c b/source/winbindd/winbindd_rpc.c index db43559..459a844 100644 --- a/source/winbindd/winbindd_rpc.c +++ b/source/winbindd/winbindd_rpc.c @@ -787,16 +787,16 @@ static NTSTATUS lookup_groupmem(struct winbindd_domain *domain, if (!NT_STATUS_IS_OK(result)) return result; - *num_names = rids->count; - rid_mem = rids->rids; - - if (!*num_names) { + if (!rids || !rids->count) { names = NULL; name_types = NULL; sid_mem = NULL; return NT_STATUS_OK; } + *num_names = rids->count; + rid_mem = rids->rids; + /* Step #2: Convert list of rids into list of usernames. Do this in bunches of ~1000 to avoid crashing NT4. It looks like there is a buffer overflow or something like that lurking around -- Samba Shared Repository