[patch] http://modauthkerb.cvs.sourceforge.net/modauthkerb/mod_auth_kerb/spnegokrb5/der_get.c?r1=1.1&r2=1.1.2.1

mod_auth_kerb-5.0-CVE-2006-5989.patch (text/plain), 559 bytes, created by Christian Heim (RETIRED) on 2007-01-10 21:32:25 UTC

Index: mod_auth_kerb-5.0-rc6/spnegokrb5/der_get.c
===================================================================
--- mod_auth_kerb-5.0-rc6.orig/spnegokrb5/der_get.c
+++ mod_auth_kerb-5.0-rc6/spnegokrb5/der_get.c
@@ -151,7 +151,7 @@ der_get_oid (const unsigned char *p, siz
     if (len < 1)
 	return ASN1_OVERRUN;
 
-    data->components = malloc(len * sizeof(*data->components));
+    data->components = malloc((len + 1) * sizeof(*data->components));
     if (data->components == NULL && len != 0)
 	return ENOMEM;
     data->components[0] = (*p) / 40;