(decrypt_internal_derived): make sure length is longer then confounder
+ checksum. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21130 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -3162,8 +3162,9 @@ decrypt_internal_derived(krb5_context context,
|
|||||||
unsigned long l;
|
unsigned long l;
|
||||||
|
|
||||||
checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
|
checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
|
||||||
if (len < checksum_sz) {
|
if (len < checksum_sz + et->confoundersize) {
|
||||||
krb5_set_error_string(context, "Encrypted data shorter then checksum");
|
krb5_set_error_string(context, "Encrypted data shorter then "
|
||||||
|
"checksum + confunder");
|
||||||
return KRB5_BAD_MSIZE;
|
return KRB5_BAD_MSIZE;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user