From 1be64cb660e4d31d089755e065ac76425ab6d41e Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 3 Jun 2016 16:34:08 +0200 Subject: s4:kdc: ignore empty supplementalCredentialsBlob structures MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441 Signed-off-by: Stefan Metzmacher Reviewed-by: Günther Deschner --- source4/kdc/db-glue.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'source4') diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index 43211426d7a..013efbffa08 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -364,9 +364,11 @@ static krb5_error_code samba_kdc_message2entry_keys(krb5_context context, } if (scb.sub.signature != SUPPLEMENTAL_CREDENTIALS_SIGNATURE) { - NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb); - ret = EINVAL; - goto out; + if (scb.sub.num_packages != 0) { + NDR_PRINT_DEBUG(supplementalCredentialsBlob, &scb); + ret = EINVAL; + goto out; + } } for (i=0; i < scb.sub.num_packages; i++) { -- cgit v1.2.1