From b8c168e565ebac826f6db77025e025e117b7c95d Mon Sep 17 00:00:00 2001
From: Love Hornquist Astrand <lha@h5l.org>
Date: Thu, 12 May 2011 21:09:28 -0700
Subject: [PATCH] check return length

---
 kdc/kerberos5.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 2470f7f32..80b290776 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -1481,6 +1481,7 @@ add_enc_pa_rep(kdc_request_t r)
     free_Checksum(&checksum);
     if (ret)
 	return ret;
+    heim_assert(cdata.length == len, "ASN.1 internal error");
 
     if (r->ek.encrypted_pa_data == NULL) {
 	ALLOC(r->ek.encrypted_pa_data);