--- net-snmp-5.4.1/snmplib/scapi.c      2006-09-15 05:47:01.000000000 -0700
+++ net-snmp-5.4.1.1/snmplib/scapi.c    2008-05-13 17:43:17.000000000 -0700
@@ -563,6 +563,10 @@

}


+    if (maclen != USM_MD5_AND_SHA_AUTH_LEN) {
+        QUITFUN(SNMPERR_GENERR, sc_check_keyed_hash_quit);
+    }
+
/*
* Generate a full hash of the message, then compare
* the result with the given MAC which may shorter than