oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(spnego_accept_sec_context): make sure the length of the choice

Browse Source 
element doesn't overrun us


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13445 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2004-03-07 14:26:20 +00:00
parent f96b2ccb60
commit 912dfa6eee
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/gssapi/accept_sec_context.c
View File

@@ -773,6 +773,9 @@ spnego_accept_sec_context
if (ret) if (ret)
return ret; return ret;
if(len > data.length - taglen)
return ASN1_OVERRUN;
ret = decode_NegTokenInit((const char *)data.data + taglen, len, ret = decode_NegTokenInit((const char *)data.data + taglen, len,
&ni, &ni_len); &ni, &ni_len);
if (ret) if (ret)

3
lib/gssapi/krb5/accept_sec_context.c
View File

@@ -773,6 +773,9 @@ spnego_accept_sec_context
if (ret) if (ret)
return ret; return ret;
if(len > data.length - taglen)
return ASN1_OVERRUN;
ret = decode_NegTokenInit((const char *)data.data + taglen, len, ret = decode_NegTokenInit((const char *)data.data + taglen, len,
&ni, &ni_len); &ni, &ni_len);
if (ret) if (ret)