summaryrefslogtreecommitdiff
path: root/source4/kdc
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2016-06-03 16:34:08 +0200
committerStefan Metzmacher <metze@samba.org>2016-07-20 21:27:17 +0200
commit1be64cb660e4d31d089755e065ac76425ab6d41e (patch)
tree0c2ea6197d3bf3b084e941398dfcc1f7a27dfc2d /source4/kdc
parentd3c890225be0110f23b6249b160f825a482ad68f (diff)
downloadsamba-1be64cb660e4d31d089755e065ac76425ab6d41e.tar.gz
s4:kdc: ignore empty supplementalCredentialsBlob structures
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'source4/kdc')
-rw-r--r--source4/kdc/db-glue.c8
1 files changed, 5 insertions, 3 deletions
diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c
index 43211426d7a..013efbffa08 100644
--- a/source4/kdc/db-glue.c
+++ b/source4/kdc/db-glue.c
@@ -364,9 +364,11 @@ static krb5_error_code samba_kdc_message2entry_keys(krb5_context context,
}
if (scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE) {
- NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);
- ret = EINVAL;
- goto out;
+ if (scb.sub.num_packages != 0) {
+ NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb);
+ ret = EINVAL;
+ goto out;
+ }
}
for (i=0; i < scb.sub.num_packages; i++) {