Fix bug #7669.

[obnox/samba-ctdb.git] / libcli / security / dom_sid.c

diff --git a/libcli/security/dom_sid.c b/libcli/security/dom_sid.c
index 0c8890079af7e8d99305fe4e83391e20f8a6af1b..350a14f311b063c5e1cc057a5159eae5e6a8b2a1 100644 (file)
--- a/libcli/security/dom_sid.c
+++ b/libcli/security/dom_sid.c
@@ -117,6 +117,10 @@ bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
                if (sidstr[i] == '-') num_sub_auths++;
        }
 
+       if (num_sub_auths > MAXSUBAUTHS) {
+               return false;
+       }
+
        ret->sid_rev_num = rev;
        ret->id_auth[0] = 0;
        ret->id_auth[1] = 0;