diff --git a/crypto/openssh/servconf.c b/crypto/openssh/servconf.c
index 7bb92211ab6c..5441b2a544fa 100644
--- a/crypto/openssh/servconf.c
+++ b/crypto/openssh/servconf.c
@@ -596,6 +596,7 @@ parse_flag:
 
 		case sDenyUsers:
 			while ((cp = strtok(NULL, WHITESPACE))) {
+				if (options->num_deny_users >= MAX_DENY_USERS)
 					fatal("%.200s line %d: too many deny users.\n",
 					    filename, linenum);
 				options->deny_users[options->num_deny_users++] = xstrdup(cp);