From 5df2dcc26a31c87842368ce56caca635bcb1d435 Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Sat, 4 Dec 2010 12:52:16 +1100
Subject: [PATCH] Ensure checksum type is keyed

---
 util_krb.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/util_krb.c b/util_krb.c
index 34d6cb6..4cc4b14 100644
--- a/util_krb.c
+++ b/util_krb.c
@@ -241,5 +241,10 @@ rfc3961ChecksumTypeForKey(OM_uint32 *minor,
     krb5_free_checksum_contents(krbContext, &cksum);
 #endif /* HAVE_KRB5INT_C_MANDATORY_CKSUMTYPE */
 
+    if (!krb5_c_is_keyed_cksum(*cksumtype)) {
+        *minor = KRB5KRB_AP_ERR_INAPP_CKSUM;
+        return GSS_S_FAILURE;
+    }
+
     return GSS_S_COMPLETE;
 }
-- 
2.1.4