]> git.ipfire.org Git - thirdparty/squid.git/commit
negotiate_kerberos_auth: check for overflow on count of group SIDs
authorAmos Jeffries <squid3@treenet.co.nz>
Wed, 6 Jan 2016 04:02:24 +0000 (17:02 +1300)
committerAmos Jeffries <squid3@treenet.co.nz>
Wed, 6 Jan 2016 04:02:24 +0000 (17:02 +1300)
commit4474192dd3821cd44430c6afd0e133389393874e
treeb29094688c48749937e48777a976c030746533a7
parenta4ae022ce6c38546707d558099367d6118bb1798
negotiate_kerberos_auth: check for overflow on count of group SIDs

When processing a Kerberos token the count of group SID records is
received from the remote end. Validate that the count given does not
exceed the possible length values on 32-bit systems.
 Detected by Coveriity Scan. Issues 12587011258702,1258703
helpers/negotiate_auth/kerberos/negotiate_kerberos_pac.cc