oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

more checking for addresses and stuff

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2107 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-07-09 04:57:55 +00:00
parent f79e8aeda5
commit b6064bad2f
2 changed files with 46 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
lib/krb5/rd_safe.c
View File

@@ -24,10 +24,32 @@ krb5_rd_safe(krb5_context context,
r = KRB5KRB_AP_ERR_MSG_TYPE;
goto failure;
}
/* XXX - checksum collision-proff and keyed */
if (safe.cksum.cksumtype != CKSUMTYPE_RSA_MD4) {
r = KRB5KRB_AP_ERR_INAPP_CKSUM;
goto failure;
}
/* check sender address */
if (safe.safe_body.s_address
&& !krb5_address_compare (context,
auth_context->remote_address,
safe.safe_body.s_address)) {
r = KRB5KRB_AP_ERR_BADADDR;
goto failure;
}
/* check receiver address */
if (safe.safe_body.r_address
&& !krb5_address_compare (context,
auth_context->local_address,
safe.safe_body.r_address)) {
r = KRB5KRB_AP_ERR_BADADDR;
goto failure;
}
/* check timestamp */
if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {
struct timeval tv;