X-Git-Url: http://git.tuebingen.mpg.de/?p=paraslash.git;a=blobdiff_plain;f=user_list.c;h=1d3f21cfa248a9b950ea57fd86877682ae75e152;hp=63bfdfc259878402f3f70c2a5c62be5d5fa96ce9;hb=0322a7faaf28dfc2b4d545586926adfae7bf036e;hpb=002731cd3938f3be6b71651e56c062af1adcdec0

diff --git a/user_list.c b/user_list.c
index 63bfdfc2..1d3f21cf 100644
--- a/user_list.c
+++ b/user_list.c
@@ -8,9 +8,11 @@
 
 #include <sys/types.h>
 #include <dirent.h>
+#include <openssl/rc4.h>
 
 #include "para.h"
 #include "error.h"
+#include "crypt.h"
 #include "fd.h"
 #include "string.h"
 #include "list.h"
@@ -53,6 +55,11 @@ static void populate_user_list(char *user_list_file)
 				para_strerror(-ret));
 			continue;
 		}
+		if (ret < CHALLENGE_SIZE + 2 * CHALLENGE_SIZE + 41) {
+			PARA_WARNING_LOG("rsa key for %s too small\n", n);
+			rsa_free(rsa);
+			continue;
+		}
 		u = para_malloc(sizeof(*u));
 		u->name = para_strdup(n);
 		u->rsa = rsa;