Fix valgrind-found memory overwrite.

diff --git a/source/smbd/trans2.c b/source/smbd/trans2.c
index 7392271b483ddf3b33a2b70c2848edf42da3d75b..ce038e719acf5e5f88f0862def23c0a8a0d2aa7f 100644 (file)
--- a/source/smbd/trans2.c
+++ b/source/smbd/trans2.c
@@ -1469,7 +1469,7 @@ static BOOL get_lanman2_dir_entry(TALLOC_CTX *ctx,
                        p += fill_ea_buffer(ctx, p, space_remaining, conn, name_list);
                        nameptr = p;
                        len = srvstr_push(base_data, flags2,
-                                         p + 1, fname, PTR_DIFF(end_data, p),
+                                         p + 1, fname, PTR_DIFF(end_data, p+1),
                                          STR_TERMINATE | STR_NOALIGN);
                        if (flags2 & FLAGS2_UNICODE_STRINGS) {
                                if (len > 2) {
@@ -1554,7 +1554,7 @@ static BOOL get_lanman2_dir_entry(TALLOC_CTX *ctx,
                        SOFF_T(p,0,allocation_size); p += 8;
                        SIVAL(p,0,nt_extmode); p += 4;
                        len = srvstr_push(base_data, flags2,
-                                         p + 4, fname, PTR_DIFF(end_data, p),
+                                         p + 4, fname, PTR_DIFF(end_data, p+4),
                                          STR_TERMINATE_ASCII);
                        SIVAL(p,0,len);
                        p += 4 + len;