The branch, v3-5-test has been updated
via 26faf12... s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
from e687a20... Re-fix bug 5202 - cannot change ACLs on writable file
with "dos filemode=yes"
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test
- Log -----------------------------------------------------------------
commit 26faf1262fc2f0fa2d8c2874150852ac36951162
Author: Volker Lendecke <v...@samba.org>
Date: Sat Jan 9 20:22:00 2010 +0100
s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This
means
with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the
blob
after the ntlmssp_end().
(cherry picked from commit 43c841b6bd92e987109df81b6b8a2b85f21b0181)
Addresses bug #7027 (winbindd crash in winbindd_dual_ccache_ntlm_auth due to
freed memory reference.)
-----------------------------------------------------------------------
Summary of changes:
source3/winbindd/winbindd_ccache_access.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/winbindd/winbindd_ccache_access.c
b/source3/winbindd/winbindd_ccache_access.c
index f0c77b2..508bda4 100644
--- a/source3/winbindd/winbindd_ccache_access.c
+++ b/source3/winbindd/winbindd_ccache_access.c
@@ -115,7 +115,7 @@ static NTSTATUS do_ntlm_auth_with_hashes(const char
*username,
data_blob_free(&reply);
goto done;
}
- *auth_msg = reply;
+ *auth_msg = data_blob(reply.data, reply.length);
status = NT_STATUS_OK;
done:
--
Samba Shared Repository
