]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
libcli:auth:sess_crypt_blob: ensure key has 7 bytes
authorDouglas Bagnall <douglas.bagnall@catalyst.net.nz>
Sat, 14 May 2022 03:05:16 +0000 (15:05 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Tue, 8 Aug 2023 04:39:39 +0000 (04:39 +0000)
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libcli/auth/session.c

index dba6c5c5b49a9cac1f65ecbfca653bfd0757ab48..515b7aed629bc58b7902cd83039bf1598ec8b747 100644 (file)
@@ -38,6 +38,10 @@ int sess_crypt_blob(DATA_BLOB *out, const DATA_BLOB *in, const DATA_BLOB *sessio
                return GNUTLS_E_INVALID_REQUEST;
        }
 
+       if (session_key->length < 7) {
+               return GNUTLS_E_INVALID_REQUEST;
+       }
+
        for (i=0,k=0;
             i<in->length;
             i += 8, k += 7) {