oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(krb5_rd_safe): handle no sequence number as zero when we were

Browse Source 
expecting a sequence number.  MIT krb5 cannot generate a sequence
number of zero, instead generating no sequence number


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9483 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
2001-01-19 04:25:37 +00:00
parent 1eab2064ea
commit 2b112c9a06
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
lib/krb5/rd_safe.c
View File

@@ -1,5 +1,5 @@
/* /*
* Copyright (c) 1997 - 2000 Kungliga Tekniska H<>gskolan * Copyright (c) 1997 - 2001 Kungliga Tekniska H<>gskolan
* (Royal Institute of Technology, Stockholm, Sweden). * (Royal Institute of Technology, Stockholm, Sweden).
* All rights reserved. * All rights reserved.
* *
@@ -146,10 +146,16 @@ krb5_rd_safe(krb5_context context,
} }
/* XXX - check replay cache */ /* XXX - check replay cache */
/* check sequence number */ /* check sequence number. since MIT krb5 cannot generate a sequence
number of zero but instead generates no sequence number, we accept that
*/
if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_SEQUENCE) { if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_SEQUENCE) {
if (safe.safe_body.seq_number == NULL || if ((safe.safe_body.seq_number == NULL
*safe.safe_body.seq_number != auth_context->remote_seqnumber) { && auth_context->remote_seqnumber != 0)
|| (safe.safe_body.seq_number != NULL
&& *safe.safe_body.seq_number !=
auth_context->remote_seqnumber)) {
ret = KRB5KRB_AP_ERR_BADORDER; ret = KRB5KRB_AP_ERR_BADORDER;
goto failure; goto failure;
} }