libcli:auth:sess_crypt_blob: ensure key has 7 bytes

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/auth/session.c b/libcli/auth/session.c
index dba6c5c5b49a9cac1f65ecbfca653bfd0757ab48..515b7aed629bc58b7902cd83039bf1598ec8b747 100644 (file)
--- a/libcli/auth/session.c
+++ b/libcli/auth/session.c
@@ -38,6 +38,10 @@ int sess_crypt_blob(DATA_BLOB *out, const DATA_BLOB *in, const DATA_BLOB *sessio
                return GNUTLS_E_INVALID_REQUEST;
        }
 
+       if (session_key->length < 7) {
+               return GNUTLS_E_INVALID_REQUEST;
+       }
+
        for (i=0,k=0;
             i<in->length;
             i += 8, k += 7) {