From e63ee98085dc3e6d5f466f1f22d1e298359d4fe9 Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Sun, 2 Jan 2011 18:33:38 +1100
Subject: [PATCH] Allow zero length but non-NULL tokens on init_sec_context

---
 mech_eap/init_sec_context.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mech_eap/init_sec_context.c b/mech_eap/init_sec_context.c
index bc3f554..b46f981 100644
--- a/mech_eap/init_sec_context.c
+++ b/mech_eap/init_sec_context.c
@@ -730,7 +730,7 @@ gss_init_sec_context(OM_uint32 *minor,
 
     sm = &eapGssInitiatorSm[ctx->state];
 
-    if (input_token != GSS_C_NO_BUFFER) {
+    if (input_token != GSS_C_NO_BUFFER && input_token->length != 0) {
         major = gssEapVerifyToken(minor, ctx, input_token,
                                   &tokType, &innerInputToken);
         if (GSS_ERROR(major))
-- 
2.1.4