From 5fbd461972cb4da117cc6b3d70a932ae4de6becf Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: Mon, 7 Jan 2013 10:35:34 +0100
Subject: explicit null dereferenced in sss_nss_mc_get_record()

https://fedorahosted.org/sssd/ticket/1724
---
 src/sss_client/nss_mc_common.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src/sss_client')

diff --git a/src/sss_client/nss_mc_common.c b/src/sss_client/nss_mc_common.c
index 59f5b257..f777890a 100644
--- a/src/sss_client/nss_mc_common.c
+++ b/src/sss_client/nss_mc_common.c
@@ -220,6 +220,11 @@ errno_t sss_nss_mc_get_record(struct sss_cli_mc_ctx *ctx,
             continue;
         }
 
+        if (!MC_CHECK_RECORD_LENGTH(ctx, rec)) {
+            /* record has invalid length */
+            return EINVAL;
+        }
+
         if (rec_len > buf_size) {
             free(copy_rec);
             copy_rec = malloc(rec_len);
-- 
cgit