From: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
Date: Fri, 6 Nov 2009 11:10:42 +0000 (+0100)
Subject: s4:dcesrv_samr_ValidatePassword - I forgot to create an out buffer
X-Git-Url: http://git.samba.org/?p=abartlet%2Fsamba.git%2F.git;a=commitdiff_plain;h=6afee5f13074b375ded8d373d3ab12e9d35b47fd

s4:dcesrv_samr_ValidatePassword - I forgot to create an out buffer
---

diff --git a/source4/rpc_server/samr/dcesrv_samr.c b/source4/rpc_server/samr/dcesrv_samr.c
index eecc00d4628..0bc90b872a6 100644
--- a/source4/rpc_server/samr/dcesrv_samr.c
+++ b/source4/rpc_server/samr/dcesrv_samr.c
@@ -4366,6 +4366,7 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call,
 					     struct samr_ValidatePassword *r)
 {
 	struct samr_GetDomPwInfo r2;
+	struct samr_PwInfo pwInfo;
 	DATA_BLOB password;
 	enum samr_ValidationStatus res;
 	NTSTATUS status;
@@ -4373,6 +4374,7 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call,
 	(*r->out.rep) = talloc_zero(mem_ctx, union samr_ValidatePasswordRep);
 
 	r2.in.domain_name = NULL;
+	r2.out.info = &pwInfo;
 	status = dcesrv_samr_GetDomPwInfo(dce_call, mem_ctx, &r2);
 	if (!NT_STATUS_IS_OK(status)) {
 		return status;
@@ -4389,8 +4391,8 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call,
 		res = samdb_check_password(mem_ctx,
 					   dce_call->conn->dce_ctx->lp_ctx,
 					   &password,
-					   r2.out.info->password_properties,
-					   r2.out.info->min_password_length);
+					   pwInfo.password_properties,
+					   pwInfo.min_password_length);
 		(*r->out.rep)->ctr2.status = res;
 	break;
 	case NetValidatePasswordReset:
@@ -4399,8 +4401,8 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call,
 		res = samdb_check_password(mem_ctx,
 					   dce_call->conn->dce_ctx->lp_ctx,
 					   &password,
-					   r2.out.info->password_properties,
-					   r2.out.info->min_password_length);
+					   pwInfo.password_properties,
+					   pwInfo.min_password_length);
 		(*r->out.rep)->ctr3.status = res;
 	break;
 	}