krb5/mech/k5sealv3.c

150 	if (SIZE_MAX - 300 < message->length)
152 	ec_max = SIZE_MAX - message->length - 300;
163 	plain.length = message->length + 16 + ec;
164 	plain.data = MALLOC(plain.length);
170 		ctx->enc->enctype, plain.length, &tlen))) {
171 	    FREE(plain.data, plain.length);
179 	    FREE(plain.data, plain.length);
197 	(void) memcpy(plain.data, message->value, message->length);
198 	(void) memset(plain.data + message->length, 'x', ec);
199 	(void) memcpy(plain.data + message->length + ec, outbuf, 16);
203 	cipher.ciphertext.length = bufsize - 16;
206 	(void) bzero(plain.data, plain.length);
207 	FREE(plain.data, plain.length);
232 	plain.length = message->length + 16;
233 	plain.data = MALLOC(message->length + 16);
238 	    FREE(plain.data, plain.length);
242 	bufsize = 16 + message2->length + ctx->cksum_size;
245 	    FREE(plain.data, plain.length);
260 	       checksum length later.  */
272 	(void) memcpy(plain.data, message->value, message->length);
273 	(void) memcpy(plain.data + message->length, outbuf, 16);
277 	if (message2->length)
278 	    (void) memcpy(outbuf + 16, message2->value, message2->length);
280 	sum.contents = outbuf + 16 + message2->length;
281 	sum.length = ctx->cksum_size;
285 	bzero(plain.data, plain.length);
286 	FREE(plain.data, plain.length);
293 	if (sum.length != ctx->cksum_size) {
297 	(void) memcpy(outbuf + 16 + message2->length, sum.contents,
334     token->length = bufsize;
340     token->length = 0;
453 	    cipher.ciphertext.length = bodysize - 16;
455 	    plain.length = plainlen = bodysize - 16;
456 	    plain.data = MALLOC(plain.length);
465 	       plain.length has been adjusted to the
466 	       correct length.  */
467 	    althdr = (uchar_t *)plain.data + plain.length - 16;
475 	    message_buffer->length = plain.length - ec - 16;
476 	    message_buffer->value = MALLOC(message_buffer->length);
482 			message_buffer->length);
498 	    plain.length = bodysize-ec;
502 	    sum.length = ec;
503 	    if (sum.length != ctx->cksum_size) {
519 	    message_buffer->length = plain.length - 16;
520 	    message_buffer->value = MALLOC(message_buffer->length);
524 		plain.data, message_buffer->length);
549 	plain.length = message_buffer->length + 16;
550 	plain.data = MALLOC(plain.length);
553 	if (message_buffer->length)
555 		message_buffer->value, message_buffer->length);
556 	(void) memcpy(plain.data + message_buffer->length, ptr, 16);
557 	sum.length = bodysize - 16;
564 	    FREE(plain.data, plain.length);
569 	FREE(plain.data, plain.length);