X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=mech_eap%2Futil_name.c;fp=mech_eap%2Futil_name.c;h=70d23e2624d16942bddfe828e874a586b465c8f5;hb=eac53185dfa9b9d81095d8ae86bce84529de41f9;hp=d365f9852927611a4352ff1efc7287544855c1ef;hpb=bcf3ea0b5ee87514dfd576be291703031c29f941;p=moonshot.git

diff --git a/mech_eap/util_name.c b/mech_eap/util_name.c
index d365f98..70d23e2 100644
--- a/mech_eap/util_name.c
+++ b/mech_eap/util_name.c
@@ -282,7 +282,7 @@ gssEapImportNameInternal(OM_uint32 *minor,
     remain = nameBuffer->length;
 
     if (flags & EXPORT_NAME_FLAG_OID) {
-        if (remain < 6 + GSS_EAP_MECHANISM->length + 4)
+        if (remain < 6 + GSS_EAP_MECHANISM->length)
             return GSS_S_BAD_NAME;
 
         if (flags & EXPORT_NAME_FLAG_COMPOSITE)
@@ -312,6 +312,7 @@ gssEapImportNameInternal(OM_uint32 *minor,
     }
 
     /* NAME_LEN */
+    CHECK_REMAIN(4);
     len = load_uint32_be(p);
     UPDATE_REMAIN(4);