Changeset 578 for branches/samba-3.3.x/source/smbd/server.c

Timestamp:

Jun 25, 2011, 7:14:41 PM (14 years ago)

Author:

Herwig Bauernfeind

Message:

Update Samba 3.3 to 3.3.15 (security update)

File:

• branches/samba-3.3.x/source/smbd/server.c (modified) (5 diffs)

branches/samba-3.3.x/source/smbd/server.c

@@ -210 +210 @@
         /* We will abort gracefully when the client or remote system 
            goes away */
-        smbd_set_server_fd(dup(0));
+        int fd = dup(0);
+
+        if (fd < 0 || fd >= FD_SETSIZE) {
+                return false;
+        }
+
+        smbd_set_server_fd(fd);
         
         /* close our standard file descriptors */
@@ -437 +443 @@
                                                         ifss,
                                                         true);
-                                if(s == -1) {
+                                if(s < 0 || s >= FD_SETSIZE) {
+                                        close(s);
                                         continue;
                                 }
@@ -517 +524 @@
                                                 &ss,
                                                 true);
-                                if (s == -1) {
+                                if (s < 0 || s >= FD_SETSIZE) {
                                         continue;
                                 }
@@ -710 +717 @@
                         socklen_t in_addrlen = sizeof(addr);
                         pid_t child = 0;
+                        int fd;
 
                         s = -1;
@@ -722 +730 @@
                         }
 
-                        smbd_set_server_fd(accept(s,&addr,&in_addrlen));
-
-                        if (smbd_server_fd() == -1 && errno == EINTR)
+                        fd = accept(s,&addr,&in_addrlen);
+                        if (fd == -1 && errno == EINTR)
                                 continue;
-
-                        if (smbd_server_fd() == -1) {
+                        if (fd == -1) {
                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
                                          strerror(errno)));
                                 continue;
                         }
+                        if (fd < 0 || fd >= FD_SETSIZE) {
+                                DEBUG(2,("open_sockets_smbd: bad fd %d\n",
+                                        fd ));
+                                continue;
+                        }
+
+                        smbd_set_server_fd(fd);
 
                         /* Ensure child is set to blocking mode */