diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-04-03 10:15:37 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-04-03 13:26:41 +0200 |
| commit | 726e335681428614c2909b9c2987286a05afb982 (patch) | |
| tree | c7929f7e45da1949c5817b736dc273f388c1aeb6 | |
| parent | 141255402340299c4ae544f546a979f2872a091a (diff) | |
| download | sssd-726e335681428614c2909b9c2987286a05afb982.tar.gz sssd-726e335681428614c2909b9c2987286a05afb982.tar.bz2 sssd-726e335681428614c2909b9c2987286a05afb982.zip | |
Fix potential out-of-bounds write in sss_idmap_sid_to_dom_sid
https://fedorahosted.org/sssd/ticket/1861
| -rw-r--r-- | src/lib/idmap/sss_idmap_conv.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/idmap/sss_idmap_conv.c b/src/lib/idmap/sss_idmap_conv.c index a3360422..ef93f2a9 100644 --- a/src/lib/idmap/sss_idmap_conv.c +++ b/src/lib/idmap/sss_idmap_conv.c @@ -289,7 +289,7 @@ enum idmap_error_code sss_idmap_sid_to_dom_sid(struct sss_idmap_ctx *ctx, } do { - if (dom_sid->num_auths > SID_SUB_AUTHS) { + if (dom_sid->num_auths >= SID_SUB_AUTHS) { err = IDMAP_SID_INVALID; goto done; } |