diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-12-16 11:35:42 -0500 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2013-12-16 11:35:52 -0500 |
| commit | 1249c75810e3d5c33ba723c65a904ee914ca8048 (patch) | |
| tree | 53eb1048dc853cbdf87153a1a70ce249e3032257 /src | |
| parent | 37af638b742dbd642eb70092e4f7781c3f69d86d (diff) | |
| download | krb5-1249c75810e3d5c33ba723c65a904ee914ca8048.tar.gz krb5-1249c75810e3d5c33ba723c65a904ee914ca8048.tar.xz krb5-1249c75810e3d5c33ba723c65a904ee914ca8048.zip | |
Remove unneeded check in SPNEGO initiator
In init_ctx_cont, if the response token contains no fields, we set a
return value but don't actually quit out of the function. We do not
need this check (we will fail later on if a piece of required
information isn't present), so just remove it. Reported by
simo@redhat.com.
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/gssapi/spnego/spnego_mech.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/src/lib/gssapi/spnego/spnego_mech.c b/src/lib/gssapi/spnego/spnego_mech.c index d82934b6cd..818a1b4439 100644 --- a/src/lib/gssapi/spnego/spnego_mech.c +++ b/src/lib/gssapi/spnego/spnego_mech.c @@ -648,13 +648,6 @@ init_ctx_cont(OM_uint32 *minor_status, gss_ctx_id_t *ctx, gss_buffer_t buf, responseToken, mechListMIC); if (ret != GSS_S_COMPLETE) goto cleanup; - if (acc_negState == ACCEPT_DEFECTIVE_TOKEN && - supportedMech == GSS_C_NO_OID && - *responseToken == GSS_C_NO_BUFFER && - *mechListMIC == GSS_C_NO_BUFFER) { - /* Reject "empty" token. */ - ret = GSS_S_DEFECTIVE_TOKEN; - } if (acc_negState == REJECT) { *minor_status = ERR_SPNEGO_NEGOTIATION_FAILED; map_errcode(minor_status); |