From 58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe Mon Sep 17 00:00:00 2001 From: Zhanna Tsitkov Date: Thu, 19 Sep 2013 13:11:15 -0400 Subject: Err codes in KRB_ERROR protocol messages are < 128 If the error code is out of [0,127] range, assign it to KRB_ERR_GENERIC. This fix is to correct the previous behavior with [0,128] range. For more information see krb5_err.et --- src/kdc/do_as_req.c | 2 +- src/kdc/do_tgs_req.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'src/kdc') diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c index 11ba5a283..8790ec403 100644 --- a/src/kdc/do_as_req.c +++ b/src/kdc/do_as_req.c @@ -351,7 +351,7 @@ egress: } if (errcode != KRB5KDC_ERR_DISCARD) { errcode -= ERROR_TABLE_BASE_krb5; - if (errcode < 0 || errcode > 128) + if (errcode < 0 || errcode > KRB_ERR_MAX) errcode = KRB_ERR_GENERIC; errcode = prepare_error_as(state->rstate, state->request, diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c index f047dd8f6..ae5e7572e 100644 --- a/src/kdc/do_tgs_req.c +++ b/src/kdc/do_tgs_req.c @@ -776,7 +776,7 @@ cleanup: got_err = 1; } errcode -= ERROR_TABLE_BASE_krb5; - if (errcode < 0 || errcode > 128) + if (errcode < 0 || errcode > KRB_ERR_MAX) errcode = KRB_ERR_GENERIC; retval = prepare_error_tgs(state, request, header_ticket, errcode, -- cgit