From: Stefan Metzmacher <metze@samba.org>
Date: Fri, 3 Jun 2016 14:34:08 +0000 (+0200)
Subject: s4:kdc: ignore empty supplementalCredentialsBlob structures
X-Git-Tag: tdb-1.3.10~307
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1be64cb660e4d31d089755e065ac76425ab6d41e;p=thirdparty%2Fsamba.git

s4:kdc: ignore empty supplementalCredentialsBlob structures

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
---

diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c
index 43211426d7a..013efbffa08 100644
--- a/source4/kdc/db-glue.c
+++ b/source4/kdc/db-glue.c
@@ -364,9 +364,11 @@ static krb5_error_code samba_kdc_message2entry_keys(krb5_context context,
 		}
 
 		if (scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE) {
-			NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);
-			ret = EINVAL;
-			goto out;
+			if (scb.sub.num_packages != 0) {
+				NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);
+				ret = EINVAL;
+				goto out;
+			}
 		}
 
 		for (i=0; i < scb.sub.num_packages; i++) {