s3:smbd: only allow cancel with the same session

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 82aa483055bb01f8e6723a7ef4331a299f149ce6..04f8c4ba10e6ea5b9dfbb7056f15bf9efa18254c 100644 (file)
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -2408,6 +2408,10 @@ static NTSTATUS smbd_smb2_request_process_cancel(struct smbd_smb2_request *req)
                uint64_t message_id;
                uint64_t async_id;
 
+               if (cur->session != req->session) {
+                       continue;
+               }
+
                if (cur->compound_related) {
                        /*
                         * Never cancel anything in a compound request.