Missed one check on the memcpy for bug #7063.

Jeremy.

diff --git a/source3/rpc_server/srv_spoolss_nt.c b/source3/rpc_server/srv_spoolss_nt.c
index 33d47df33aa7e6d7482935e5bcbc906cd9f96466..7a4c9c92638312517ee221446acd4d04b59b2cba 100644 (file)
--- a/source3/rpc_server/srv_spoolss_nt.c
+++ b/source3/rpc_server/srv_spoolss_nt.c
@@ -9455,7 +9455,7 @@ WERROR _spoolss_XcvData(pipes_struct *p,
 
        *r->out.status_code = 0;
 
-       if (r->out.out_data && r->in.out_data_size && out_data.length) {
+       if (r->out.out_data && out_data.data && r->in.out_data_size && out_data.length) {
                memcpy(r->out.out_data, out_data.data,
                        MIN(r->in.out_data_size, out_data.length));
        }