(spnego_accept_sec_context): make sure the length of the choice

element doesn't overrun us git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13445 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-07 14:26:20 +00:00
parent f96b2ccb60
commit 912dfa6eee
2 changed files with 6 additions and 0 deletions
--- a/lib/gssapi/accept_sec_context.c
+++ b/lib/gssapi/accept_sec_context.c
@@ -773,6 +773,9 @@ spnego_accept_sec_context
    if (ret)
 	return ret;

+    if(len > data.length - taglen)
+	return ASN1_OVERRUN;
+
    ret = decode_NegTokenInit((const char *)data.data + taglen, len,
 			      &ni, &ni_len);
    if (ret)