Attachment #25202 for bug #61204

View | Details | Raw Unified | Return to bug 61204
Collapse All | Expand All




               req->rq_trans2buffer = smb_kmalloc(buf_len, GFP_NOFS);
               if (!req->rq_trans2buffer)
                       goto out_no_mem;
               memset(req->rq_trans2buffer, 0, buf_len);
               req->rq_parm = req->rq_trans2buffer;
               req->rq_data = req->rq_trans2buffer + parm_tot;

        * Check whether we've received all of the data. Note that
        * we use the packet totals -- total lengths might shrink!
        */
       if (req->rq_ldata >= data_tot && req->rq_lparm >= parm_tot) {
               req->rq_ldata = data_tot;
               req->rq_lparm = parm_tot;
               return 0;
       }
       return 1;
out_too_long:
- 
-------------------------------------------------------------------------
Stefan Esser                                        s.esser@e-matters.de
e-matters Security                         http://security.e-matters.de/
GPG-Key                gpg --keyserver pgp.mit.edu --recv-key 0x15ABDA78 
Key fingerprint       7806 58C8 CFA8 CE4A 1C2C  57DD 4AE1 795E 15AB DA78
-------------------------------------------------------------------------
Did I help you? Consider a gift:            http://wishlist.suspekt.org/
-------------------------------------------------------------------------

Return to bug 61204

Lines 634-639 Link Here

(-)exclude (-5 / +5 lines)
634	req->rq_trans2buffer = smb_kmalloc(buf_len, GFP_NOFS);	634	req->rq_trans2buffer = smb_kmalloc(buf_len, GFP_NOFS);
635	if (!req->rq_trans2buffer)	635	if (!req->rq_trans2buffer)
636	goto out_no_mem;	636	goto out_no_mem;
		637	memset(req->rq_trans2buffer, 0, buf_len);
637	req->rq_parm = req->rq_trans2buffer;	638	req->rq_parm = req->rq_trans2buffer;
638	req->rq_data = req->rq_trans2buffer + parm_tot;	639	req->rq_data = req->rq_trans2buffer + parm_tot;
Lines 657-664 Link Here
657	* Check whether we've received all of the data. Note that	658	* Check whether we've received all of the data. Note that
658	* we use the packet totals -- total lengths might shrink!	659	* we use the packet totals -- total lengths might shrink!
659	*/	660	*/
660	if (req->rq_ldata >= data_tot && req->rq_lparm >= parm_tot)	661	if (req->rq_ldata >= data_tot && req->rq_lparm >= parm_tot) {
		662	req->rq_ldata = data_tot;
		663	req->rq_lparm = parm_tot;
661	return 0;	664	return 0;
		665	}
662	return 1;	666	return 1;
663	out_too_long:	667	out_too_long:
664	-
665	-------------------------------------------------------------------------
666	Stefan Esser s.esser@e-matters.de	668	Stefan Esser s.esser@e-matters.de
667	e-matters Security http://security.e-matters.de/	669	e-matters Security http://security.e-matters.de/
668	GPG-Key gpg --keyserver pgp.mit.edu --recv-key 0x15ABDA78	670	GPG-Key gpg --keyserver pgp.mit.edu --recv-key 0x15ABDA78
669	Key fingerprint 7806 58C8 CFA8 CE4A 1C2C 57DD 4AE1 795E 15AB DA78	671	Key fingerprint 7806 58C8 CFA8 CE4A 1C2C 57DD 4AE1 795E 15AB DA78
670	-------------------------------------------------------------------------
671	Did I help you? Consider a gift: http://wishlist.suspekt.org/	672	Did I help you? Consider a gift: http://wishlist.suspekt.org/
672	-------------------------------------------------------------------------