cellconfig-check-for-corrupt-keyfile-20051007

don't crash when we have a corrupt keyfile

diff --git a/src/auth/cellconfig.c b/src/auth/cellconfig.c
index b05f6fc..b47cacc 100644 (file)
--- a/src/auth/cellconfig.c
+++ b/src/auth/cellconfig.c
@@ -1107,6 +1107,12 @@ afsconf_IntGetKeys(struct afsconf_dir *adir)
        return 0;
     }
 
+    if (code < sizeof(afs_int32) + (tstr->nkeys*sizeof(struct afsconf_key))) {
+       tstr->nkeys = 0;
+       UNLOCK_GLOBAL_MUTEX;
+       return 0;
+    }
+
     /* convert key structure to host order */
     tstr->nkeys = ntohl(tstr->nkeys);
     for (fd = 0; fd < tstr->nkeys; fd++)