Fix potential truncation of Kerberos credentials (Issue #5435)

[thirdparty/cups.git] / cups / auth.c

diff --git a/cups/auth.c b/cups/auth.c
index 4c509bbc716291cfe4fd4a04de391113de9014d5..0a490948c8221756c007e0731df261f19624721e 100644 (file)
--- a/cups/auth.c
+++ b/cups/auth.c
@@ -442,7 +442,7 @@ _cupsSetNegotiateAuthString(
     */
 
     int authsize = 10 +                        /* "Negotiate " */
-                  (int)output_token.length * 4 / 3 + 1 + 1;
+                  (int)((output_token.length * 4 / 3 + 3) & ~3) + 1;
                                        /* Base64 + nul */
 
     httpSetAuthString(http, NULL, NULL);