summaryrefslogtreecommitdiffstats
path: root/src/kdc
diff options
context:
space:
mode:
authorZhanna Tsitkov <tsitkova@mit.edu>2013-09-19 13:11:15 -0400
committerZhanna Tsitkov <tsitkova@mit.edu>2013-09-23 12:06:47 -0400
commit58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe (patch)
tree490308667d2787d1d0a28ebb3d8842a90367c5ed /src/kdc
parent66b141745fc56bbdb7b738582ba7e1cce1e503c8 (diff)
downloadkrb5-58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe.tar.gz
krb5-58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe.tar.xz
krb5-58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe.zip
Err codes in KRB_ERROR protocol messages are < 128
If the error code is out of [0,127] range, assign it to KRB_ERR_GENERIC. This fix is to correct the previous behavior with [0,128] range. For more information see krb5_err.et
Diffstat (limited to 'src/kdc')
-rw-r--r--src/kdc/do_as_req.c2
-rw-r--r--src/kdc/do_tgs_req.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index 11ba5a283..8790ec403 100644
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -351,7 +351,7 @@ egress:
}
if (errcode != KRB5KDC_ERR_DISCARD) {
errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > 128)
+ if (errcode < 0 || errcode > KRB_ERR_MAX)
errcode = KRB_ERR_GENERIC;
errcode = prepare_error_as(state->rstate, state->request,
diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index f047dd8f6..ae5e7572e 100644
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -776,7 +776,7 @@ cleanup:
got_err = 1;
}
errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > 128)
+ if (errcode < 0 || errcode > KRB_ERR_MAX)
errcode = KRB_ERR_GENERIC;
retval = prepare_error_tgs(state, request, header_ticket, errcode,