summaryrefslogtreecommitdiff
path: root/src/lib/idmap
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-04-03 10:15:37 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-04-03 13:26:41 +0200
commit726e335681428614c2909b9c2987286a05afb982 (patch)
treec7929f7e45da1949c5817b736dc273f388c1aeb6 /src/lib/idmap
parent141255402340299c4ae544f546a979f2872a091a (diff)
downloadsssd-726e335681428614c2909b9c2987286a05afb982.tar.gz
sssd-726e335681428614c2909b9c2987286a05afb982.tar.bz2
sssd-726e335681428614c2909b9c2987286a05afb982.zip
Fix potential out-of-bounds write in sss_idmap_sid_to_dom_sid
https://fedorahosted.org/sssd/ticket/1861
Diffstat (limited to 'src/lib/idmap')
-rw-r--r--src/lib/idmap/sss_idmap_conv.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/idmap/sss_idmap_conv.c b/src/lib/idmap/sss_idmap_conv.c
index a3360422..ef93f2a9 100644
--- a/src/lib/idmap/sss_idmap_conv.c
+++ b/src/lib/idmap/sss_idmap_conv.c
@@ -289,7 +289,7 @@ enum idmap_error_code sss_idmap_sid_to_dom_sid(struct sss_idmap_ctx *ctx,
}
do {
- if (dom_sid->num_auths > SID_SUB_AUTHS) {
+ if (dom_sid->num_auths >= SID_SUB_AUTHS) {
err = IDMAP_SID_INVALID;
goto done;
}