Missed one check on the memcpy for bug #7063.

Jeremy.

diff --git a/source3/rpc_server/srv_spoolss_nt.c b/source3/rpc_server/srv_spoolss_nt.c
index 7f7bba077d69fa2b4cc9666858897f412ff93923..3870da98115f9b62ff8e1cebcd7a70c73fdcf1d9 100644 (file)
--- a/source3/rpc_server/srv_spoolss_nt.c
+++ b/source3/rpc_server/srv_spoolss_nt.c
@@ -9955,7 +9955,7 @@ WERROR _spoolss_XcvData(pipes_struct *p,
 
        *r->out.status_code = 0;
 
-       if (r->out.out_data && r->in.out_data_size && out_data.length) {
+       if (r->out.out_data && out_data.data && r->in.out_data_size && out_data.length) {
                memcpy(r->out.out_data, out_data.data,
                        MIN(r->in.out_data_size, out_data.length));
        }