oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

verify reply by checking asn1 class, type and tag of the reply if

Browse Source 
there is one.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20957 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-07 04:34:14 +00:00
parent 43a028c82a
commit 4fe154b2f9
1 changed files with 26 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
kdc/kdc-replay.c
View File

@@ -75,7 +75,7 @@ main(int argc, char **argv)
struct timeval tv; struct timeval tv;
krb5_address a; krb5_address a;
krb5_data d, r; krb5_data d, r;
uint32_t t; uint32_t t, clty, tag;
char astr[80]; char astr[80];
ret = krb5_ret_uint32(sp, &t); ret = krb5_ret_uint32(sp, &t);
@@ -94,6 +94,13 @@ main(int argc, char **argv)
ret = krb5_ret_data(sp, &d); ret = krb5_ret_data(sp, &d);
if (ret) if (ret)
krb5_errx(context, 1, "krb5_ret_data"); krb5_errx(context, 1, "krb5_ret_data");
ret = krb5_ret_uint32(sp, &clty);
if (ret)
krb5_errx(context, 1, "krb5_ret_uint32(class|type)");
ret = krb5_ret_uint32(sp, &tag);
if (ret)
krb5_errx(context, 1, "krb5_ret_uint32(tag)");
ret = krb5_addr2sockaddr (context, &a, (struct sockaddr *)&sa, ret = krb5_addr2sockaddr (context, &a, (struct sockaddr *)&sa,
&salen, 88); &salen, 88);
@@ -121,8 +128,25 @@ main(int argc, char **argv)
if (ret) if (ret)
krb5_err(context, 1, ret, "krb5_kdc_process_request"); krb5_err(context, 1, ret, "krb5_kdc_process_request");
if(r.length) if (r.length) {
Der_class cl;
Der_type ty;
unsigned int tag2;
ret = der_get_tag (r.data, r.length,
&cl, &ty, &tag2, NULL);
if (MAKE_TAG(cl, ty, 0) != clty)
krb5_errx(context, 1, "class|type mismatch: %d != %d",
(int)MAKE_TAG(cl, ty, 0), (int)clty);
if (tag != tag2)
krb5_errx(context, 1, "tag mismatch");
krb5_data_free(&r); krb5_data_free(&r);
} else {
if (clty != 0xffffffff)
krb5_errx(context, 1, "clty not invalid");
if (tag != 0xffffffff)
krb5_errx(context, 1, "tag not invalid");
}
krb5_data_free(&d); krb5_data_free(&d);
krb5_free_address(context, &a); krb5_free_address(context, &a);