From 63ed9620416744b044281b5c8b1e951cbaa65568 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 18 Jun 2015 15:43:32 +0200 Subject: [PATCH] lib/gssapi/krb5: make _gssapi_verify_pad() more robust Signed-off-by: Stefan Metzmacher --- lib/gssapi/krb5/decapsulate.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/gssapi/krb5/decapsulate.c b/lib/gssapi/krb5/decapsulate.c index 640c064d0..86085f569 100644 --- a/lib/gssapi/krb5/decapsulate.c +++ b/lib/gssapi/krb5/decapsulate.c @@ -190,6 +190,9 @@ _gssapi_verify_pad(gss_buffer_t wrapped_token, size_t padlength; int i; + if (wrapped_token->length < 1) + return GSS_S_BAD_MECH; + pad = (u_char *)wrapped_token->value + wrapped_token->length - 1; padlength = *pad; -- 2.11.4.GIT