diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2007-07-20 08:51:58 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2007-07-20 08:51:58 +0000 |
| commit | 4281165e025620782ea39bdca77aaf65cd704899 (patch) | |
| tree | b4846a3416e52f963984a892cf17f10cfb4b48f3 /src/lib/krb5/krb/rd_safe.c | |
| parent | eec1bd8aa5fefd66deca49ebc38037d82818615d (diff) | |
| download | krb5-4281165e025620782ea39bdca77aaf65cd704899.tar.gz krb5-4281165e025620782ea39bdca77aaf65cd704899.tar.xz krb5-4281165e025620782ea39bdca77aaf65cd704899.zip | |
Pull out code for looking up the current time, comparing the offset of
a supplied timestamp against the configured maximum clock skew, and
possibly generating an error message, into a separate routine.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19722 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/krb5/krb/rd_safe.c')
| -rw-r--r-- | src/lib/krb5/krb/rd_safe.c | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/src/lib/krb5/krb/rd_safe.c b/src/lib/krb5/krb/rd_safe.c index 2fa8ec43cb..3eae17269c 100644 --- a/src/lib/krb5/krb/rd_safe.c +++ b/src/lib/krb5/krb/rd_safe.c @@ -1,7 +1,7 @@ /* * lib/krb5/krb/rd_safe.c * - * Copyright 1990,1991 by the Massachusetts Institute of Technology. + * Copyright 1990,1991,2007 by the Massachusetts Institute of Technology. * All Rights Reserved. * * Export of this software from the United States of America may @@ -31,8 +31,6 @@ #include "cleanup.h" #include "auth_con.h" -#define in_clock_skew(date) (labs((date)-currenttime) < context->clockskew) - /* parses a KRB_SAFE message from inbuf, placing the integrity-protected user data in *outbuf. @@ -231,15 +229,9 @@ krb5_rd_safe(krb5_context context, krb5_auth_context auth_context, if (auth_context->auth_context_flags & KRB5_AUTH_CONTEXT_DO_TIME) { krb5_donot_replay replay; - krb5_timestamp currenttime; - - if ((retval = krb5_timeofday(context, ¤ttime))) - goto error; - if (!in_clock_skew(replaydata.timestamp)) { - retval = KRB5KRB_AP_ERR_SKEW; + if ((retval = krb5int_check_clockskew(context, replaydata.timestamp))) goto error; - } if ((retval = krb5_gen_replay_name(context, auth_context->remote_addr, "_safe", &replay.client))) |