projects
/
mech_eap.orig
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(from parent 1:
f8baec5
)
correct buffer length check when importing name
author
Luke Howard
<lukeh@padl.com>
Tue, 15 Mar 2011 08:55:08 +0000
(19:55 +1100)
committer
Luke Howard
<lukeh@padl.com>
Tue, 15 Mar 2011 08:55:08 +0000
(19:55 +1100)
util_name.c
patch
|
blob
|
history
diff --git
a/util_name.c
b/util_name.c
index
d365f98
..
70d23e2
100644
(file)
--- a/
util_name.c
+++ b/
util_name.c
@@
-282,7
+282,7
@@
gssEapImportNameInternal(OM_uint32 *minor,
remain = nameBuffer->length;
if (flags & EXPORT_NAME_FLAG_OID) {
- if (remain < 6 + GSS_EAP_MECHANISM->length
+ 4
)
+ if (remain < 6 + GSS_EAP_MECHANISM->length)
return GSS_S_BAD_NAME;
if (flags & EXPORT_NAME_FLAG_COMPOSITE)
@@
-312,6
+312,7
@@
gssEapImportNameInternal(OM_uint32 *minor,
}
/* NAME_LEN */
+ CHECK_REMAIN(4);
len = load_uint32_be(p);
UPDATE_REMAIN(4);