Avoid NULL pointer dereference in SMBsendend handler
authorMichael Hanselmann <public@hansmi.ch>
Wed, 6 Mar 2019 22:44:23 +0000 (23:44 +0100)
committerAndrew Bartlett <abartlet@samba.org>
Tue, 12 Mar 2019 00:42:19 +0000 (00:42 +0000)
commita27c39c2c9fd3161f5bf3ae5dba687c8d49519ef
tree2b9390d86f3401692fb5e2a47febd6e7dcaad34e
parent0a804d38c4a7fed7aef6c357091ec5790bec7873
Avoid NULL pointer dereference in SMBsendend handler

The "reply_sendend" function wouldn't check whether the connection had
any pending message state. A client sending an out-of-order SMBsendend
message would trigger a NULL pointer dereference.

Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Michael Hanselmann <public@hansmi.ch>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/smbd/message.c