r12919: Ensure we never 'extend' the session key length, or fill in past the
authorAndrew Bartlett <abartlet@samba.org>
Fri, 13 Jan 2006 23:08:20 +0000 (23:08 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 18:51:03 +0000 (13:51 -0500)
commitf3aa702944ed7086d93bf05075f910e7e4617d9c
treea49e3b84bb2e16a3a29a40bc6d7c5cfa9c6b8450
parente13cb0ab175069eb670c8b2f57379ababacfcce3
r12919: Ensure we never 'extend' the session key length, or fill in past the
length of the (possibly null) pointer.

In reality this should come to us either 16 or 0 bytes in length, but
this is the safest test.

This is bug 3401 in Samba3, thanks to Yau Lam Yiu <yiuext at cs.ust.hk>

Andrew Bartlett
source/auth/ntlmssp/ntlmssp.c