Print this page
NEX-5260 smbd segfaults while running smbtorture:rpc.lsa.lookupnames
NEX-5261 smbd segfaults while running smbtorture:rpc.winreg
NEX-5262 smbd segfaults while running smbtorture:rpc.samba3
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Matt Barden <matt.barden@nexenta.com>
SMB-39 Use AF_UNIX pipes for RPC

Split Close
Expand all
Collapse all
          --- old/usr/src/lib/smbsrv/libmlsvc/common/srvsvc_svc.c
          +++ new/usr/src/lib/smbsrv/libmlsvc/common/srvsvc_svc.c
↓ open down ↓ 13 lines elided ↑ open up ↑
  14   14   * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15   15   * If applicable, add the following below this CDDL HEADER, with the
  16   16   * fields enclosed by brackets "[]" replaced with your own identifying
  17   17   * information: Portions Copyright [yyyy] [name of copyright owner]
  18   18   *
  19   19   * CDDL HEADER END
  20   20   */
  21   21  
  22   22  /*
  23   23   * Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
  24      - * Copyright 2013 Nexenta Systems, Inc.  All rights reserved.
       24 + * Copyright 2016 Nexenta Systems, Inc.  All rights reserved.
  25   25   */
  26   26  
  27   27  /*
  28   28   * Server Service RPC (SRVSVC) server-side interface definition.
  29   29   * The server service provides a remote administration interface.
  30   30   *
  31   31   * This service uses NERR/Win32 error codes rather than NT status
  32   32   * values.
  33   33   */
  34   34  
↓ open down ↓ 960 lines elided ↑ open up ↑
 995  995                  info1006 = &info->nsg_info1006;
 996  996                  info1006->shi1006_max_uses = SHI_USES_UNLIMITED;
 997  997                  param->result.ru.info1006 = info1006;
 998  998                  break;
 999  999  
1000 1000          case 1501:
1001 1001                  info1501 = &info->nsg_info1501;
1002 1002  
1003 1003                  status = srvsvc_share_getsd(mxa, &si, &sd);
1004 1004                  if (status == ERROR_SUCCESS) {
1005      -                        info503->shi503_reserved = sd.sd_size;
1006      -                        info503->shi503_security_descriptor = sd.sd_buf;
     1005 +                        info1501->shi1501_reserved = sd.sd_size;
     1006 +                        info1501->shi1501_security_descriptor = sd.sd_buf;
1007 1007                  } else {
1008      -                        info503->shi503_reserved = 0;
1009      -                        info503->shi503_security_descriptor = NULL;
     1008 +                        info1501->shi1501_reserved = 0;
     1009 +                        info1501->shi1501_security_descriptor = NULL;
1010 1010                  }
1011 1011  
1012 1012                  param->result.ru.info1501 = info1501;
1013 1013                  break;
1014 1014  
1015 1015          default:
1016 1016                  status = ERROR_ACCESS_DENIED;
1017 1017                  break;
1018 1018          }
1019 1019  
↓ open down ↓ 2127 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX