From: Volker Lendecke <vl@samba.org>
Date: Wed, 6 Oct 2010 15:40:58 +0000 (+0200)
Subject: s3: Fix input check in is_encrypted_packet
X-Git-Url: http://git.samba.org/?a=commitdiff_plain;h=7915142848f07b477f2c26d0034a79840757b8af;hp=cd04af78d51121cc16453fcd52e0d4c3516bc3c5;p=mat%2Fsamba.git

s3: Fix input check in is_encrypted_packet

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Oct  8 07:40:52 UTC 2010 on sn-devel-104
---

diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c
index 0cf730ee4f..1d8d4641e7 100644
--- a/source3/smbd/seal.c
+++ b/source3/smbd/seal.c
@@ -55,7 +55,9 @@ bool is_encrypted_packet(const uint8_t *inbuf)
 	uint16_t enc_num;
 
 	/* Ignore non-session messages or non 0xFF'E' messages. */
-	if(CVAL(inbuf,0) || !(inbuf[4] == 0xFF && inbuf[5] == 'E')) {
+	if(CVAL(inbuf,0)
+	   || (smb_len(inbuf) < 8)
+	   || !(inbuf[4] == 0xFF && inbuf[5] == 'E')) {
 		return false;
 	}