[net] Insufficient length validation in TAuthenticate::SecureRecv()

[jblomer]

Check duplicate issues.

• Checked for duplicates

Description

When receiving data in TAuthenticate::SecureRecv(), the code should check that the provided length does not exceed the data buffer size.

Many thanks to Pavel Kohout from AISLE for the original report!

Reproducer

Reproducible through corrupted / crafted message sent to TAuthenticate::SecureRecv()

ROOT version

master

Installation method

from sources

Operating system

n/a

Additional context

No response