From d94025fa0605c15eaca874587f67d1812467088d Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Mon, 10 Feb 2014 10:08:46 -0800 Subject: [PATCH] smbd: Fix memory overwrites SIVAL writes 32 bit, not 16 Signed-off-by: Volker Lendecke Reviewed-by: Michael Adam Back-ported-from master git commit : 9088bde059e93a84745ec2158e2e640b5bb13844 --- source3/smbd/smb2_ioctl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/source3/smbd/smb2_ioctl.c b/source3/smbd/smb2_ioctl.c index c46520a..8d24fb5 100644 --- a/source3/smbd/smb2_ioctl.c +++ b/source3/smbd/smb2_ioctl.c @@ -569,8 +569,8 @@ static struct tevent_req *smbd_smb2_ioctl_send(TALLOC_CTX *mem_ctx, SIVAL(state->out_output.data, 0x00, conn->smb2.server.capabilities); memcpy(state->out_output.data+0x04, out_guid_blob.data, 16); - SIVAL(state->out_output.data, 0x14, conn->smb2.server.security_mode); - SIVAL(state->out_output.data, 0x16, conn->smb2.server.dialect); + SSVAL(state->out_output.data, 0x14, conn->smb2.server.security_mode); + SSVAL(state->out_output.data, 0x16, conn->smb2.server.dialect); tevent_req_done(req); return tevent_req_post(req, ev); -- 1.9.0.rc1.175.g0b1dcb5