diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2005-11-07 02:19:19 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:45:51 -0500 |
| commit | f9c2f271e805fdf3e5d7c0632dc26c6258b5a5ed (patch) | |
| tree | e72a6efb9bf80f702a2d79da6d3fccd1caaeb1a1 /source4 | |
| parent | cca42c611a3f39b18395bcc40b097c65dd3469ae (diff) | |
| download | samba-f9c2f271e805fdf3e5d7c0632dc26c6258b5a5ed.tar.gz samba-f9c2f271e805fdf3e5d7c0632dc26c6258b5a5ed.tar.bz2 samba-f9c2f271e805fdf3e5d7c0632dc26c6258b5a5ed.zip | |
r11540: Some notes to myself on RFC complience.
Andrew Bartlett
(This used to be commit 6d439cae989efff7530d75e5dd21faa8e5230059)
Diffstat (limited to 'source4')
| -rw-r--r-- | source4/kdc/kdc.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/source4/kdc/kdc.c b/source4/kdc/kdc.c index 4a1bb0ad05..1f27154bde 100644 --- a/source4/kdc/kdc.c +++ b/source4/kdc/kdc.c @@ -101,6 +101,9 @@ static void kdc_send_handler(struct kdc_socket *kdc_socket) if (NT_STATUS_EQUAL(status, STATUS_MORE_ENTRIES)) { break; } + if (NT_STATUS_EQUAL(status, NT_STATUS_INVALID_BUFFER_SIZE)) { + /* Replace with a krb err, response to big */ + } DLIST_REMOVE(kdc_socket->send_queue, rep); talloc_free(rep); @@ -248,6 +251,10 @@ static void kdc_tcp_recv(struct stream_connection *conn, uint16_t flags) if (kdcconn->partial_read != 4) return; packet_length = RIVAL(kdcconn->partial.data, 0) + 4; + + if (packet_length & (1 << 31)) { + /* return 'KRB_ERR_FIELD_TOOLONG' and terminate */ + } kdcconn->partial.data = talloc_realloc(kdcconn, kdcconn->partial.data, uint8_t, packet_length); |