diff options
author | Stefan Metzmacher <metze@samba.org> | 2016-06-03 16:34:08 +0200 |
---|---|---|
committer | Stefan Metzmacher <metze@samba.org> | 2016-07-20 21:27:17 +0200 |
commit | 1be64cb660e4d31d089755e065ac76425ab6d41e (patch) | |
tree | 0c2ea6197d3bf3b084e941398dfcc1f7a27dfc2d /source4 | |
parent | d3c890225be0110f23b6249b160f825a482ad68f (diff) | |
download | samba-1be64cb660e4d31d089755e065ac76425ab6d41e.tar.gz |
s4:kdc: ignore empty supplementalCredentialsBlob structures
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'source4')
-rw-r--r-- | source4/kdc/db-glue.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index 43211426d7a..013efbffa08 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -364,9 +364,11 @@ static krb5_error_code samba_kdc_message2entry_keys(krb5_context context, } if (scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE) { - NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb); - ret = EINVAL; - goto out; + if (scb.sub.num_packages != 0) { + NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb); + ret = EINVAL; + goto out; + } } for (i=0; i < scb.sub.num_packages; i++) { |