s3: Fix bug 7917: Yet another bug in chain_reply

Found by Michael Hanscho <samba@micha.priv.at> with a WinCE client.
(cherry picked from commit 8917d84130991ed24767f21876b18ac82b246d87)

diff --git a/source3/smbd/process.c b/source3/smbd/process.c
index 21b2c910401896fe7bcef2358bd03abbc0e197df..cbcbfadf3ce6f4ca4f0d96a69d97ea9da0ba5f33 100644 (file)
--- a/source3/smbd/process.c
+++ b/source3/smbd/process.c
@@ -1856,8 +1856,8 @@ void chain_reply(struct smb_request *req)
                 * Update smb headers where subsequent chained commands
                 * may have updated them.
                 */
-               SCVAL(req->chain_outbuf, smb_tid, CVAL(req->outbuf, smb_tid));
-               SCVAL(req->chain_outbuf, smb_uid, CVAL(req->outbuf, smb_uid));
+               SSVAL(req->chain_outbuf, smb_tid, SVAL(req->outbuf, smb_tid));
+               SSVAL(req->chain_outbuf, smb_uid, SVAL(req->outbuf, smb_uid));
 
                if (!smb_splice_chain(&req->chain_outbuf,
                                      CVAL(req->outbuf, smb_com),