From cbab5928ec55fffff642e9212deff94b6d2be652 Mon Sep 17 00:00:00 2001
From: Assar Westerlund <assar@sics.se>
Date: Sat, 12 Jul 1997 14:39:44 +0000
Subject: [PATCH] add address compare

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2190 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/krb5/rd_req.c | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/lib/krb5/rd_req.c b/lib/krb5/rd_req.c
index 5c96eca30..93b1f5a12 100644
--- a/lib/krb5/rd_req.c
+++ b/lib/krb5/rd_req.c
@@ -135,13 +135,20 @@ krb5_rd_req_with_keyblock(krb5_context context,
 	    return KRB5KRB_AP_ERR_BADMATCH;
     }
 
+    /* check addresses */
+
+    if (t->tkt.caddr
+	&& (*auth_context)->remote_address
+	&& !krb5_address_search (context,
+				 (*auth_context)->remote_address,
+				 t->tkt.caddr))
+	    return KRB5KRB_AP_ERR_BADADDR;
+
     if (authenticator.seq_number)
       (*auth_context)->remote_seqnumber = *(authenticator.seq_number);
 
     /* XXX - Xor sequence numbers */
 
-    /* XXX - check addresses */
-
     /* XXX - subkeys? */
 
     if (ap_req_options) {