aboutsummaryrefslogtreecommitdiff
path: root/src/lib/krb5/asn.1/asn1_get.c
diff options
context:
space:
mode:
authorTom Yu <tlyu@mit.edu>2002-06-24 19:20:51 +0000
committerTom Yu <tlyu@mit.edu>2002-06-24 19:20:51 +0000
commit5bab480155fa5dfc016c1a8e9829df449c9ea0a5 (patch)
tree7ceb5ac80a7cd21cc09c6d00efb823847155e4d2 /src/lib/krb5/asn.1/asn1_get.c
parent61682d68c205903a38b2f55beb84618ed76574f4 (diff)
downloadkrb5-5bab480155fa5dfc016c1a8e9829df449c9ea0a5.zip
krb5-5bab480155fa5dfc016c1a8e9829df449c9ea0a5.tar.gz
krb5-5bab480155fa5dfc016c1a8e9829df449c9ea0a5.tar.bz2
* asn1_get.c (asn1_get_length): Check for negative length.
[pullup from 1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14560 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/krb5/asn.1/asn1_get.c')
-rw-r--r--src/lib/krb5/asn.1/asn1_get.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/lib/krb5/asn.1/asn1_get.c b/src/lib/krb5/asn.1/asn1_get.c
index fc945f1..1652db1 100644
--- a/src/lib/krb5/asn.1/asn1_get.c
+++ b/src/lib/krb5/asn.1/asn1_get.c
@@ -145,6 +145,8 @@ asn1_error_code asn1_get_length(buf, retlen, indef)
if(retval) return retval;
len = (len<<8) + (int)o;
}
+ if (len < 0)
+ return ASN1_OVERRUN;
if (indef != NULL && !len)
*indef = 1;
if(retlen != NULL) *retlen = len;