https://fedorahosted.org/sssd/ticket/1724
From a927c2deeab3b5b54f655e8cbe921e43cc8e1415 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrez...@redhat.com>
Date: Thu, 3 Jan 2013 09:48:39 +0100
Subject: [PATCH] explicit null dereferenced in sss_nss_mc_get_record()

https://fedorahosted.org/sssd/ticket/1724
---
 src/sss_client/nss_mc_common.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/sss_client/nss_mc_common.c b/src/sss_client/nss_mc_common.c
index 59f5b257b9c646aa826499623103cd2c45abdbc7..e68e107aa8b2696189cf92c8cee7a1058be54575 100644
--- a/src/sss_client/nss_mc_common.c
+++ b/src/sss_client/nss_mc_common.c
@@ -220,6 +220,11 @@ errno_t sss_nss_mc_get_record(struct sss_cli_mc_ctx *ctx,
             continue;
         }
 
+        if (rec->len == 0 || rec->len == MC_INVALID_VAL32) {
+            /* record has invalid length */
+            return EINVAL;
+        }
+
         if (rec_len > buf_size) {
             free(copy_rec);
             copy_rec = malloc(rec_len);
-- 
1.7.11.7

_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to