librpc: Fix a possible array out of bounds access

Reported by gcc 5.1.1.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

diff --git a/librpc/rpc/binding.c b/librpc/rpc/binding.c
index f131d00a88c22a5b8f86667a3246137066ab21ca..d0acd6e78bbb3ed00705ff2033e4e0aa9dae68cd 100644 (file)
--- a/librpc/rpc/binding.c
+++ b/librpc/rpc/binding.c
@@ -1226,7 +1226,7 @@ _PUBLIC_ enum dcerpc_transport_t dcerpc_transport_by_tower(const struct epm_towe
                        continue; 
                }
 
-               for (j = 0; j < transports[i].num_protocols; j++) {
+               for (j = 0; j < transports[i].num_protocols && j < MAX_PROTSEQ; j++) {
                        if (transports[i].protseq[j] != tower->floors[j+2].lhs.protocol) {
                                break;
                        }