oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Verify nonce in reply.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2446 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
1997-07-18 23:18:29 +00:00
parent cc39875abf
commit 03a4e6eefb
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/krb5/get_cred.c
View File

@@ -159,7 +159,7 @@ krb5_get_kdc_cred(krb5_context context,
*/ */
ret = krb5_sendto_kdc (context, &enc, &in_creds->server->realm, &resp); ret = krb5_sendto_kdc (context, &enc, &in_creds->server->realm, &resp);
if (ret)
goto out; goto out;
memset(&rep, 0, sizeof(rep)); memset(&rep, 0, sizeof(rep));
@@ -169,6 +169,8 @@ krb5_get_kdc_cred(krb5_context context,
NULL, NULL,
NULL, NULL,
NULL); NULL);
if(ret == 0 && rep.part2.nonce != req.req_body.nonce)
ret = KRB5KRB_AP_ERR_MODIFIED;
krb5_free_kdc_rep(context, &rep); krb5_free_kdc_rep(context, &rep);
}else if(decode_KRB_ERROR(resp.data, resp.length, &error, &len) == 0){ }else if(decode_KRB_ERROR(resp.data, resp.length, &error, &len) == 0){
#if 0 #if 0