auth: mech-rpa - Fail on zero len buffer

diff --git a/src/auth/mech-rpa.c b/src/auth/mech-rpa.c
index 08298ebdd68b6cdc3b1806910315d7bcb03feded..2de8705b4f361b39a163beb2af33a753a456008d 100644 (file)
--- a/src/auth/mech-rpa.c
+++ b/src/auth/mech-rpa.c
@@ -224,7 +224,7 @@ rpa_read_buffer(pool_t pool, const unsigned char **data,
                return 0;
 
        len = *p++;
-       if (p + len > end)
+       if (p + len > end || len == 0)
                return 0;
 
        *buffer = p_malloc(pool, len);