From 726e335681428614c2909b9c2987286a05afb982 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Wed, 3 Apr 2013 10:15:37 +0200
Subject: Fix potential out-of-bounds write in sss_idmap_sid_to_dom_sid

https://fedorahosted.org/sssd/ticket/1861
---
 src/lib/idmap/sss_idmap_conv.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/lib')

diff --git a/src/lib/idmap/sss_idmap_conv.c b/src/lib/idmap/sss_idmap_conv.c
index a3360422..ef93f2a9 100644
--- a/src/lib/idmap/sss_idmap_conv.c
+++ b/src/lib/idmap/sss_idmap_conv.c
@@ -289,7 +289,7 @@ enum idmap_error_code sss_idmap_sid_to_dom_sid(struct sss_idmap_ctx *ctx,
     }
 
     do {
-        if (dom_sid->num_auths > SID_SUB_AUTHS) {
+        if (dom_sid->num_auths >= SID_SUB_AUTHS) {
             err = IDMAP_SID_INVALID;
             goto done;
         }
-- 
cgit