From 58ea3bdbfe6330225a2d58dfb00ccf1ad70617fe Mon Sep 17 00:00:00 2001 From: Zhanna Tsitkov Date: Thu, 19 Sep 2013 13:11:15 -0400 Subject: Err codes in KRB_ERROR protocol messages are < 128 If the error code is out of [0,127] range, assign it to KRB_ERR_GENERIC. This fix is to correct the previous behavior with [0,128] range. For more information see krb5_err.et --- src/lib/gssapi/krb5/accept_sec_context.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib') diff --git a/src/lib/gssapi/krb5/accept_sec_context.c b/src/lib/gssapi/krb5/accept_sec_context.c index 82bd013c3..9f9b6c679 100644 --- a/src/lib/gssapi/krb5/accept_sec_context.c +++ b/src/lib/gssapi/krb5/accept_sec_context.c @@ -1233,7 +1233,7 @@ fail: memset(&krb_error_data, 0, sizeof(krb_error_data)); code -= ERROR_TABLE_BASE_krb5; - if (code < 0 || code > 128) + if (code < 0 || code > KRB_ERR_MAX) code = 60 /* KRB_ERR_GENERIC */; krb_error_data.error = code; -- cgit