s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo in case output_buffer_leng...

Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE>
(cherry picked from commit a93f9c3d33e442c84d0c9da7eb5d25ca4b54fc33)

diff --git a/source3/smbd/smb2_getinfo.c b/source3/smbd/smb2_getinfo.c
index 55071e8745a24e9d3c8d015b649bfaadc44143a6..30daaadd302cc7c2ea3aa7fbdf7ddaac09550357 100644 (file)
--- a/source3/smbd/smb2_getinfo.c
+++ b/source3/smbd/smb2_getinfo.c
@@ -485,6 +485,11 @@ static struct tevent_req *smbd_smb2_getinfo_send(TALLOC_CTX *mem_ctx,
                return tevent_req_post(req, ev);
        }
 
+       if (state->out_output_buffer.length > in_output_buffer_length) {
+               tevent_req_nterror(req, NT_STATUS_INFO_LENGTH_MISMATCH);
+               return tevent_req_post(req, ev);
+       }
+
        tevent_req_done(req);
        return tevent_req_post(req, ev);
 }