[krbdev.mit.edu #9248] git commit

[Greg Hudson via RT]

<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9248 >


Validate lengths when deserializing profiles

Add bounds checks to profile_ser_internalize(), in a similar fashion
to commit 63ae6a8d99ce89258d732f7561233f60df533fa9 for other
deserialization functions.

[ghudson at mit.edu: added a bounds check for fcount; rewrote commit
message]

(cherry picked from commit 5281e51e2421d9379f8f2ac654e401d305fac6e7)

https://github.com/krb5/krb5/commit/070b895b8b5237c9d264956cfc0b4a3ac1311e1f
Author: Bogdan Boguslavskij <bogdanb at altlinux.org>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 070b895b8b5237c9d264956cfc0b4a3ac1311e1f
Branch: krb5-1.22
 src/util/profile/prof_init.c | 4 ++++
 1 file changed, 4 insertions(+)