From: Luke Howard <lukeh@padl.com>
Date: Sat, 4 Dec 2010 01:52:16 +0000 (+1100)
Subject: Ensure checksum type is keyed
X-Git-Tag: vm/20110310~81
X-Git-Url: http://www.project-moonshot.org/gitweb/?a=commitdiff_plain;ds=sidebyside;h=5df2dcc26a31c87842368ce56caca635bcb1d435;p=mech_eap.git

Ensure checksum type is keyed
---

diff --git a/util_krb.c b/util_krb.c
index 34d6cb6..4cc4b14 100644
--- a/util_krb.c
+++ b/util_krb.c
@@ -241,5 +241,10 @@ rfc3961ChecksumTypeForKey(OM_uint32 *minor,
     krb5_free_checksum_contents(krbContext, &cksum);
 #endif /* HAVE_KRB5INT_C_MANDATORY_CKSUMTYPE */
 
+    if (!krb5_c_is_keyed_cksum(*cksumtype)) {
+        *minor = KRB5KRB_AP_ERR_INAPP_CKSUM;
+        return GSS_S_FAILURE;
+    }
+
     return GSS_S_COMPLETE;
 }