diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c index 7a33a04ef9..856c2896e4 100644 --- a/libraries/libldap/cyrus.c +++ b/libraries/libldap/cyrus.c @@ -768,7 +768,7 @@ int ldap_pvt_sasl_secprops( return LDAP_NOT_SUPPORTED; } - if( maxbufsize && (( maxbufsize < SASL_MIN_BUFF_SIZE ) { + if( maxbufsize && (( maxbufsize < SASL_MIN_BUFF_SIZE ) || (maxbufsize > SASL_MAX_BUFF_SIZE ))) { /* bad maxbufsize */