Valgrind found a bug (subtracting a pointer from a length rather than the

length of what the pointer points to).
Jeremy.
(This used to be commit 492a96e9922c1ef96b967f2965f8bba1f5bc8f23)

diff --git a/source3/auth/auth_winbind.c b/source3/auth/auth_winbind.c
index 0b19746597df3d2e712c367c0ce35108ae41008b..6ae8685b113372aeec926e38c9163945851eafa0 100644 (file)
--- a/source3/auth/auth_winbind.c
+++ b/source3/auth/auth_winbind.c
@@ -29,7 +29,7 @@
 static NTSTATUS get_info3_from_ndr(TALLOC_CTX *mem_ctx, struct winbindd_response *response, NET_USER_INFO_3 *info3)
 {
        uint8 *info3_ndr;
-       size_t len = response->length - sizeof(response);
+       size_t len = response->length - sizeof(struct winbindd_response);
        prs_struct ps;
        if (len > 0) {
                info3_ndr = response->extra_data;