oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

bug-compatible with MIT

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2255 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-07-13 07:27:07 +00:00
parent 9a3939461e
commit 38250db965
2 changed files with 49 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
lib/krb5/rd_safe.c
View File

@@ -25,7 +25,7 @@ krb5_rd_safe(krb5_context context,
goto failure;
}
/* XXX - checksum collision-proff and keyed */
if (safe.cksum.cksumtype != CKSUMTYPE_RSA_MD4) {
if (safe.cksum.cksumtype != CKSUMTYPE_RSA_MD5_DES) {
r = KRB5KRB_AP_ERR_INAPP_CKSUM;
goto failure;
}
@@ -74,12 +74,31 @@ krb5_rd_safe(krb5_context context,
}
}
r = krb5_verify_checksum (context,
safe.safe_body.user_data.data,
safe.safe_body.user_data.length,
&safe.cksum);
if (r)
goto failure;
{
u_char buf[1024];
size_t len;
Checksum c;
copy_Checksum (&safe.cksum, &c);
safe.cksum.cksumtype = 0;
safe.cksum.checksum.data = NULL;
safe.cksum.checksum.length = 0;
encode_KRB_SAFE (buf + sizeof(buf) - 1,
sizeof(buf),
&safe,
&len);
r = krb5_verify_checksum (context,
buf + sizeof(buf) - len,
len,
&auth_context->key,
&c);
free_Checksum (&c);
if (r)
goto failure;
}
outbuf->length = safe.safe_body.user_data.length;
outbuf->data = malloc(outbuf->length);
if (outbuf->data == NULL) {