diff options
| -rw-r--r-- | org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java b/org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java index cbcb4d240e..4969414c59 100644 --- a/org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java +++ b/org.eclipse.jgit.ssh.apache/src/org/eclipse/jgit/internal/transport/sshd/agent/SshAgentClient.java @@ -427,14 +427,14 @@ public class SshAgentClient implements SshAgent { private static PublicKey readKey(Buffer buffer) throws BufferException { int endOfBuffer = buffer.wpos(); int keyLength = buffer.getInt(); - int afterKey = buffer.rpos() + keyLength; - if (keyLength <= 0 || afterKey > endOfBuffer) { + if (keyLength <= 0 || keyLength > buffer.available()) { throw new BufferException( MessageFormat.format(SshdText.get().sshAgentWrongKeyLength, Integer.toString(keyLength), Integer.toString(buffer.rpos()), Integer.toString(endOfBuffer))); } + int afterKey = buffer.rpos() + keyLength; // Limit subsequent reads to the public key blob buffer.wpos(afterKey); try { |