r24468: Don't forget the +4 for length :-).

Jeremy.

diff --git a/source/smbd/process.c b/source/smbd/process.c
index ce04c4331f13b264ed22b2bd7e9118343333f3f8..bf3abf97582b808bb67d553f6165316b7898885f 100644 (file)
--- a/source/smbd/process.c
+++ b/source/smbd/process.c
@@ -57,8 +57,8 @@ extern int max_send;
 
 void init_smb_request(struct smb_request *req, const uint8 *inbuf)
 {
-       size_t req_size = smb_len(inbuf);
-       /* Ensure we have at smb_size request. */
+       size_t req_size = smb_len(inbuf) + 4;
+       /* Ensure we have at least smb_size bytes. */
        if (req_size < smb_size) {
                DEBUG(0,("init_smb_request: invalid request size %u\n",
                        (unsigned int)req_size ));