scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-12 23:02:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

add sid validate

Browse source
This commit is contained in:
MiXaiLL76 2026-03-31 10:48:22 +03:00
parent f1199eb6ca
commit 8da8f62036
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
backend/open_webui/routers/auths.py
View file

@ -329,6 +329,11 @@ def convert_ad_sid_to_string(sid_bytes):
# Number of SubAuthorities (1 byte)
sub_auth_count = sid_bytes[1]
# Validate buffer length before accessing sub-authority data
if len(sid_bytes) < 8 + (sub_auth_count * 4):
log.error(f'SID buffer too short: expected {8 + sub_auth_count * 4} bytes, got {len(sid_bytes)}')
return None
# IdentifierAuthority (6 bytes, big-endian)
identifier_authority = int.from_bytes(sid_bytes[2:8], byteorder='big')