Import of OpenSSH 3.4p1

[gssapi-openssh.git] / openssh / auth2-pam.c

diff --git a/openssh/auth2-pam.c b/openssh/auth2-pam.c
index e442ca208abb429a2140abfcfbc197fd0bc1d976..b2bfa8130649958de564f64fcfebed434f1f5af0 100644 (file)
--- a/openssh/auth2-pam.c
+++ b/openssh/auth2-pam.c
@@ -140,6 +140,15 @@ input_userauth_info_response_pam(int type, u_int32_t seqnr, void *ctxt)
        nresp = packet_get_int();       /* Number of responses. */
        debug("got %d responses", nresp);
 
+
+       if (nresp != context_pam2.num_expected)
+               fatal("%s: Received incorrect number of responses "
+                   "(expected %u, received %u)", __func__, nresp,
+                   context_pam2.num_expected);
+
+       if (nresp > 100)
+               fatal("%s: too many replies", __func__);
+
        for (i = 0; i < nresp; i++) {
                int j = context_pam2.prompts[i];