$NetBSD: patch-ep,v 1.4 2008/07/15 09:14:01 adam Exp $

--- snmplib/scapi.c.orig	2008-06-09 21:20:35.000000000 +0200
+++ snmplib/scapi.c
@@ -272,7 +272,7 @@ sc_generate_keyed_hash(const oid * autht
 
     u_char          buf[SNMP_MAXBUF_SMALL];
 #if  defined(NETSNMP_USE_OPENSSL) || defined(NETSNMP_USE_PKCS11)
-    size_t             buf_len = sizeof(buf);
+    unsigned int    buf_len = sizeof(buf);
 #endif
 
     DEBUGTRACE;
@@ -553,6 +553,10 @@ sc_check_keyed_hash(const oid * authtype
     }
 #endif                          /* NETSNMP_ENABLE_TESTING_CODE */
 
+    if (maclen != USM_MD5_AND_SHA_AUTH_LEN) {
+        QUITFUN(SNMPERR_GENERR, sc_check_keyed_hash_quit);
+    }
+    
     /*
      * Sanity check.
      */
