From 2262e19a402c599403caf291730e9bdd8582cd91 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Mon, 11 Mar 2024 14:12:46 +0100
Subject: [PATCH] lib/gssapi/krb5: don't ignore _gsskrb5_decapsulate() result
 in init_sec_context responses

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15603

Signed-off-by: Stefan Metzmacher <metze@samba.org>
---
 lib/gssapi/krb5/init_sec_context.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/gssapi/krb5/init_sec_context.c b/lib/gssapi/krb5/init_sec_context.c
index 8b32ca92c..fbf9e5521 100644
--- a/lib/gssapi/krb5/init_sec_context.c
+++ b/lib/gssapi/krb5/init_sec_context.c
@@ -794,6 +794,9 @@ repl_mutual
 		return GSS_S_FAILURE;
 	    }
 	}
+	if (ret != GSS_S_COMPLETE) {
+		return ret;
+	}
 	kret = krb5_rd_rep (context,
 			    ctx->auth_context,
 			    &indata,