(krb5_verify_ap_req): do abs when verifying the timestamps
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2594 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
		| @@ -218,7 +218,7 @@ krb5_verify_ap_req(krb5_context context, | |||||||
| 	time_t start = t.ticket.authtime; | 	time_t start = t.ticket.authtime; | ||||||
| 	if(t.ticket.starttime) | 	if(t.ticket.starttime) | ||||||
| 	    start = *t.ticket.starttime; | 	    start = *t.ticket.starttime; | ||||||
| 	if(start - now > context->max_skew || t.ticket.flags.invalid) | 	if(abs(start - now) > context->max_skew || t.ticket.flags.invalid) | ||||||
| 	    return KRB5KRB_AP_ERR_TKT_NYV; | 	    return KRB5KRB_AP_ERR_TKT_NYV; | ||||||
| 	if(now - t.ticket.endtime > context->max_skew) | 	if(now - t.ticket.endtime > context->max_skew) | ||||||
| 	    return KRB5KRB_AP_ERR_TKT_EXPIRED; | 	    return KRB5KRB_AP_ERR_TKT_EXPIRED; | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Assar Westerlund
					Assar Westerlund