Bounds check in aname2lname

2015-03-18 22:25:36 -05:00
parent 89aed008a9
commit d07d93ce35
1 changed files with 6 additions and 1 deletions
--- a/lib/krb5/aname_to_localname.c
+++ b/lib/krb5/aname_to_localname.c
@@ -437,8 +437,13 @@ an2ln_def_plug_an2ln(void *plug_ctx, krb5_context context,
 	    ret = KRB5_NO_LOCALNAME;
 	    goto cleanup;
 	}
-	ret = set_res_f(set_res_ctx, heim_data_get_ptr(v));
+        value = strndup(heim_data_get_ptr(v), heim_data_get_length(v));
 	heim_release(v);
+        if (value == NULL) {
+            ret = krb5_enomem(context);
+            goto cleanup;
+        }
+	ret = set_res_f(set_res_ctx, value);
    }

 cleanup: