Paranoid in checking that we parsed the complete buffer
This commit is contained in:
		@@ -1644,6 +1644,12 @@ match_ms_upn_san(krb5_context context,
 | 
				
			|||||||
	kdc_log(context, config, 0, "Decode of MS-UPN-SAN failed");
 | 
						kdc_log(context, config, 0, "Decode of MS-UPN-SAN failed");
 | 
				
			||||||
	goto out;
 | 
						goto out;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					    if (size != list.val[0].length) {
 | 
				
			||||||
 | 
						free_MS_UPN_SAN(&upn);
 | 
				
			||||||
 | 
						kdc_log(context, config, 0, "Trailing data in ");
 | 
				
			||||||
 | 
						ret = KRB5_KDC_ERR_CLIENT_NAME_MISMATCH;
 | 
				
			||||||
 | 
						goto out;
 | 
				
			||||||
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    kdc_log(context, config, 0, "found MS UPN SAN: %s", upn);
 | 
					    kdc_log(context, config, 0, "found MS UPN SAN: %s", upn);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user