diff options
| author | John Kohl <jtkohl@mit.edu> | 1991-04-19 13:19:22 +0000 |
|---|---|---|
| committer | John Kohl <jtkohl@mit.edu> | 1991-04-19 13:19:22 +0000 |
| commit | 2f2de1961ba742abd850a6ee318bc814566b6ff3 (patch) | |
| tree | af79de2c9c6ad7d6f14c572d98cc77f3b2267114 /src/lib/krb5/krb/rd_safe.c | |
| parent | 885c16630f9b11c0b1bf5453c5b0b8a2ae7437fa (diff) | |
| download | krb5-2f2de1961ba742abd850a6ee318bc814566b6ff3.tar.gz krb5-2f2de1961ba742abd850a6ee318bc814566b6ff3.tar.xz krb5-2f2de1961ba742abd850a6ee318bc814566b6ff3.zip | |
compare network addreses
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1998 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/krb5/krb/rd_safe.c')
| -rw-r--r-- | src/lib/krb5/krb/rd_safe.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/lib/krb5/krb/rd_safe.c b/src/lib/krb5/krb/rd_safe.c index f27e71ea4..5588010bc 100644 --- a/src/lib/krb5/krb/rd_safe.c +++ b/src/lib/krb5/krb/rd_safe.c @@ -87,6 +87,10 @@ krb5_data *outbuf; cleanup(); return KRB5_RC_REQUIRED; } + if (!krb5_address_compare(sender_addr, message->s_address)) { + cleanup(); + return KRB5KRB_AP_ERR_BADADDR; + } if (retval = krb5_gen_replay_name(sender_addr, "_safe", &replay.client)) { cleanup(); @@ -124,8 +128,6 @@ krb5_data *outbuf; krb5_free_address(our_addrs); } - /* XXX check sender's address */ - /* verify the checksum */ /* to do the checksum stuff, we need to re-encode the message with a zero-length zero-type checksum, then checksum the encoding, and verify. |