Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

don't blindly trust rlen; from Heimdal 0.5.1

This commit is contained in:
joda 2002-10-21 19:39:51 +00:00
parent 2a89b96077
commit bc13d2aefa
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
crypto/dist/heimdal/kadmin/version4.c vendored
View File

@ -42,7 +42,7 @@
#include <kadm_err.h>
__RCSID("$Heimdal: version4.c,v 1.26 2002/09/10 15:20:46 joda Exp $"
"$NetBSD: version4.c,v 1.1.1.4 2002/09/12 12:41:39 joda Exp $");
"$NetBSD: version4.c,v 1.2 2002/10/21 19:39:51 joda Exp $");
#define KADM_NO_OPCODE -1
#define KADM_NO_ENCRYPT -2
@ -823,6 +823,13 @@ decode_packet(krb5_context context,
off += _krb5_get_int(msg + off, &rlen, 4);
memset(&authent, 0, sizeof(authent));
authent.length = message.length - rlen - KADM_VERSIZE - 4;
if(authent.length >= MAX_KTXT_LEN) {
krb5_warnx(context, "received bad rlen (%lu)", (unsigned long)rlen);
make_you_loose_packet (KADM_LENGTH_ERROR, reply);
return;
}
memcpy(authent.dat, (char*)msg + off, authent.length);
off += authent.length;