summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi/generic/util_token.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/gssapi/generic/util_token.c')
-rw-r--r--src/lib/gssapi/generic/util_token.c7
1 files changed, 4 insertions, 3 deletions
diff --git a/src/lib/gssapi/generic/util_token.c b/src/lib/gssapi/generic/util_token.c
index b37d9065d..24d532548 100644
--- a/src/lib/gssapi/generic/util_token.c
+++ b/src/lib/gssapi/generic/util_token.c
@@ -174,7 +174,7 @@ g_verify_token_header(
unsigned char **buf_in,
int tok_type,
unsigned int toksize_in,
- int wrapper_required)
+ int flags)
{
unsigned char *buf = *buf_in;
int seqsize;
@@ -184,7 +184,7 @@ g_verify_token_header(
if ((toksize-=1) < 0)
return(G_BAD_TOK_HEADER);
if (*buf++ != 0x60) {
- if (wrapper_required)
+ if (flags & G_VFY_TOKEN_HDR_WRAPPER_REQUIRED)
return(G_BAD_TOK_HEADER);
buf--;
toksize++;
@@ -194,7 +194,8 @@ g_verify_token_header(
if ((seqsize = der_read_length(&buf, &toksize)) < 0)
return(G_BAD_TOK_HEADER);
- if (seqsize != toksize)
+ if ((flags & G_VFY_TOKEN_HDR_IGNORE_SEQ_SIZE) == 0 &&
+ seqsize != toksize)
return(G_BAD_TOK_HEADER);
if ((toksize-=1) < 0)