Fix logic for parsing princ components (LP 1249863)
authorKevin Wasserman <kevin.wasserman@painless-security.com>
Mon, 11 Nov 2013 12:09:39 +0000 (07:09 -0500)
committerKevin Wasserman <kevin.wasserman@painless-security.com>
Mon, 11 Nov 2013 12:09:39 +0000 (07:09 -0500)
Avoid segfault when missing acceptor realm.

mech_eap/util.h

index 0aa2479..62b9f22 100644 (file)
@@ -1012,7 +1012,7 @@ static inline void
 krbPrincComponentToGssBuffer(krb5_principal krbPrinc,
                              int index, gss_buffer_t buffer)
 {
-    if (KRB_PRINC_LENGTH(krbPrinc) < index) {
+    if (KRB_PRINC_LENGTH(krbPrinc) <= index) {
         buffer->value = NULL;
         buffer->length = 0;
     } else {