s3: Fix input check in is_encrypted_packet

[mat/samba.git] / source3 / smbd / seal.c

diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c
index 0cf730ee4f849026632e33ec13c54d05a2dd06ca..1d8d4641e795b251dfc458ccb8ed557090ae2a97 100644 (file)
--- a/source3/smbd/seal.c
+++ b/source3/smbd/seal.c
@@ -55,7 +55,9 @@ bool is_encrypted_packet(const uint8_t *inbuf)
        uint16_t enc_num;
 
        /* Ignore non-session messages or non 0xFF'E' messages. */
-       if(CVAL(inbuf,0) || !(inbuf[4] == 0xFF && inbuf[5] == 'E')) {
+       if(CVAL(inbuf,0)
+          || (smb_len(inbuf) < 8)
+          || !(inbuf[4] == 0xFF && inbuf[5] == 'E')) {
                return false;
        }