From 14519086e4d04acec0e0f83e1d31ffdce4419d52 Mon Sep 17 00:00:00 2001
From: Ben Lindstrom <mouring@eviladmin.org>
Date: Tue, 26 Feb 2002 17:58:29 +0000
Subject:    - markus@cvs.openbsd.org 2002/02/23 17:59:02      [kex.c kexdh.c
 kexgex.c]      don't allow garbage after payload.

---
 kexdh.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'kexdh.c')

diff --git a/kexdh.c b/kexdh.c
index f87d52952..2049d6e1b 100644
--- a/kexdh.c
+++ b/kexdh.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: kexdh.c,v 1.14 2002/01/31 13:35:11 markus Exp $");
+RCSID("$OpenBSD: kexdh.c,v 1.15 2002/02/23 17:59:02 markus Exp $");
 
 #include <openssl/crypto.h>
 #include <openssl/bn.h>
@@ -220,6 +220,7 @@ kexdh_server(Kex *kex)
 	if ((dh_client_pub = BN_new()) == NULL)
 		fatal("dh_client_pub == NULL");
 	packet_get_bignum2(dh_client_pub);
+	packet_check_eom();
 
 #ifdef DEBUG_KEXDH
 	fprintf(stderr, "dh_client_pub= ");
-- 
cgit v1.2.3