diff options
| -rw-r--r-- | src/lib/gssapi/generic/gssapiP_generic.h | 1 | ||||
| -rw-r--r-- | src/lib/gssapi/generic/util_token.c | 3 | ||||
| -rw-r--r-- | src/lib/gssapi/krb5/k5unsealiov.c | 4 |
3 files changed, 1 insertions, 7 deletions
diff --git a/src/lib/gssapi/generic/gssapiP_generic.h b/src/lib/gssapi/generic/gssapiP_generic.h index ebc9096b6..706805d57 100644 --- a/src/lib/gssapi/generic/gssapiP_generic.h +++ b/src/lib/gssapi/generic/gssapiP_generic.h @@ -157,7 +157,6 @@ void g_make_token_header (const gss_OID_desc * mech, unsigned int body_size, /* flags for g_verify_token_header() */ #define G_VFY_TOKEN_HDR_WRAPPER_REQUIRED 0x01 -#define G_VFY_TOKEN_HDR_IGNORE_SEQ_SIZE 0x02 gss_int32 g_verify_token_header (const gss_OID_desc * mech, unsigned int *body_size, diff --git a/src/lib/gssapi/generic/util_token.c b/src/lib/gssapi/generic/util_token.c index 0c4c90c16..6e339f4ac 100644 --- a/src/lib/gssapi/generic/util_token.c +++ b/src/lib/gssapi/generic/util_token.c @@ -194,8 +194,7 @@ g_verify_token_header( if ((seqsize = der_read_length(&buf, &toksize)) < 0) return(G_BAD_TOK_HEADER); - if ((flags & G_VFY_TOKEN_HDR_IGNORE_SEQ_SIZE) == 0 && - seqsize != toksize) + if (seqsize != toksize) return(G_BAD_TOK_HEADER); if ((toksize-=1) < 0) diff --git a/src/lib/gssapi/krb5/k5unsealiov.c b/src/lib/gssapi/krb5/k5unsealiov.c index 87fe34f9d..f80f4d05d 100644 --- a/src/lib/gssapi/krb5/k5unsealiov.c +++ b/src/lib/gssapi/krb5/k5unsealiov.c @@ -315,7 +315,6 @@ kg_unseal_iov_token(OM_uint32 *minor_status, size_t input_length; unsigned int bodysize; int toktype2; - int vfyflags = 0; header = kg_locate_iov(iov, iov_count, GSS_IOV_BUFFER_TYPE_HEADER); if (header == NULL) { @@ -343,9 +342,6 @@ kg_unseal_iov_token(OM_uint32 *minor_status, input_length += trailer->buffer.length; } - if (ctx->gss_flags & GSS_C_DCE_STYLE) - vfyflags |= G_VFY_TOKEN_HDR_IGNORE_SEQ_SIZE; - code = g_verify_token_header(ctx->mech_used, &bodysize, &ptr, -1, input_length, 0); |