diff options
| author | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2009-07-28 13:01:41 +0000 |
|---|---|---|
| committer | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2009-07-28 13:01:41 +0000 |
| commit | f8cf2d2c838b8fa318dce0f47a0b79c314c16783 (patch) | |
| tree | 7c455fd89194a0abe748be117c6fb2a6ed66d7ea /tools/pidl/lib/Parse/Pidl/Samba4/NDR | |
| parent | e464a9bef912e7ca4cf6dbe2d0004e9a738d940c (diff) | |
When we passed the crytobuffer to krb5_c_decrypt() we never actually
verified that we did have enough data in the buffer/tvb, which could
lead to a SEGV.
(for example if we enable KRB5 decryption but we do NOT use TCP
reassembly, and the encrypted data goes beyong the end of the current
segment)
Change the signature to decrypt_krb5_data() to take a TVB instead of a
buffer+length.
Actually check that we do have the entire encrypted PDU before calling
out to the kerberos libraries.
svn path=/trunk/; revision=29213
Diffstat (limited to 'tools/pidl/lib/Parse/Pidl/Samba4/NDR')
0 files changed, 0 insertions, 0 deletions