From fa40b0709ab60476d295837e73a1326bb056fc73 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Wed, 23 Jul 2008 13:41:51 +0200
Subject: hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE

metze
(This used to be commit 7219740ef434091617c6bb727374251987ff2a62)
---
 source4/kdc/hdb-ldb.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/source4/kdc/hdb-ldb.c b/source4/kdc/hdb-ldb.c
index 656849334a..4b47dbf259 100644
--- a/source4/kdc/hdb-ldb.c
+++ b/source4/kdc/hdb-ldb.c
@@ -221,6 +221,12 @@ static krb5_error_code LDB_message2entry_keys(krb5_context context,
 			goto out;
 		}
 
+		if (scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE) {
+			NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);
+			ret = EINVAL;
+			goto out;
+		}
+
 		for (i=0; i < scb.sub.num_packages; i++) {
 			if (scb.sub.packages[i].unknown1 != 0x00000001) {
 				continue;
-- 
cgit