On Mon, 5 Nov 2001, Andrew Bartlett wrote: > Also, the lengths here are user-supplied, so we probably need some > bounds checking on that. Have you checked this for the > NTLMv2/no-LM/no-NT situations? with v2, lengths are variable. much longer than in v1