* xdr.c (xdr_string): Fix off-by-one error; we're not vulnerable,

	since we don't call it.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14701 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/rpc/ChangeLog b/src/lib/rpc/ChangeLog
index 0998bed13d9b5499f19cca87741151d96830fdbb..cbe3955c48c9b609fbe8f7acb6e49dd68f7387b8 100644 (file)
--- a/src/lib/rpc/ChangeLog
+++ b/src/lib/rpc/ChangeLog
@@ -1,3 +1,8 @@
+2002-08-12  Tom Yu  <tlyu@mit.edu>
+
+       * xdr.c (xdr_string): Fix off-by-one error; we're not vulnerable,
+       since we don't call it.
+
 2002-08-02  Tom Yu  <tlyu@mit.edu>
 
        * xdr_array.c (xdr_array): Account for elsize when checking

diff --git a/src/lib/rpc/xdr.c b/src/lib/rpc/xdr.c
index fd924c913ac518cc6d875b4a688f859d91978a09..07c7f67f8a0da40d182eef425cd3af252544d9ba 100644 (file)
--- a/src/lib/rpc/xdr.c
+++ b/src/lib/rpc/xdr.c
@@ -632,7 +632,7 @@ xdr_string(xdrs, cpp, maxsize)
        if (! xdr_u_int(xdrs, &size)) {
                return (FALSE);
        }
-       if (size > maxsize) {
+       if (size >= maxsize) {
                return (FALSE);
        }
        nodesize = size + 1;