= Create a cache for delegated credentials when needed.
= Return GSS_S_BAD_BINDINGS when appropriate, and otherwise tweak the return value handling in gss_accept_sec_context to be sure they are set to something reasonable. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10582 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -166,15 +166,15 @@ gssapi_krb5_verify_8003_checksum(
|
||||
p = cksum->checksum.data;
|
||||
decode_om_uint32(p, &length);
|
||||
if(length != sizeof(hash))
|
||||
return GSS_S_FAILURE;
|
||||
return GSS_S_BAD_BINDINGS;;
|
||||
|
||||
p += 4;
|
||||
|
||||
if (input_chan_bindings != GSS_C_NO_CHANNEL_BINDINGS) {
|
||||
if(hash_input_chan_bindings(input_chan_bindings, hash) != 0)
|
||||
return GSS_S_FAILURE;
|
||||
return GSS_S_BAD_BINDINGS;
|
||||
if(memcmp(hash, p, sizeof(hash)) != 0)
|
||||
return GSS_S_FAILURE;
|
||||
return GSS_S_BAD_BINDINGS;
|
||||
}
|
||||
|
||||
p += sizeof(hash);
|
||||
|
Reference in New Issue
Block a user