gssapi: protect against empty messages

73fe690d · Edward Thomson · e5fb5fe5 · 73fe690d
Commit 73fe690d authored Oct 20, 2019 by Edward Thomson
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

src/transports/auth_negotiate.c
+6 -0

No files found.
--- a/src/transports/auth_negotiate.c
+++ b/src/transports/auth_negotiate.c
@@ -160,6 +160,12 @@ static int negotiate_next_token(
 		goto done;
 	}

+	if (output_token.length == 0) {
+		git_error_set(GIT_ERROR_NET, "GSSAPI did not return token");
+		error = -1;
+		goto done;
+	}
+
 	git_buf_puts(buf, "Negotiate ");
 	git_buf_encode_base64(buf, output_token.value, output_token.length);