* wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix to round down

	by 8 even if the req_output_size-ohlen is a multiple of 8, since
	the wrap token is always padded regardless of whether it's a
	mutiple of 8 bytes.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10737 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog
index bc5c578755ad23dce185b9e93403b8473bc13d15..a94aeb72d4a3b6b3ae8d530da56ddfb54d78b8d8 100644 (file)
--- a/src/lib/gssapi/krb5/ChangeLog
+++ b/src/lib/gssapi/krb5/ChangeLog
@@ -1,3 +1,10 @@
+Fri Jul 24 21:13:53 1998  Tom Yu  <tlyu@mit.edu>
+
+       * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix to round down
+       by 8 even if the req_output_size-ohlen is a multiple of 8, since
+       the wrap token is always padded regardless of whether it's a
+       mutiple of 8 bytes.
+
 1998-06-08  Theodore Ts'o  <tytso@rsts-11.mit.edu>
 
        * k5unseal.c (kg_unseal):  Clean up lint warnings.

diff --git a/src/lib/gssapi/krb5/wrap_size_limit.c b/src/lib/gssapi/krb5/wrap_size_limit.c
index e883efde1ba347f1cf54a5aebfd085810460d248..f2366d16e2085abd1b7304ab1732f0af5cc3fbb9 100644 (file)
--- a/src/lib/gssapi/krb5/wrap_size_limit.c
+++ b/src/lib/gssapi/krb5/wrap_size_limit.c
@@ -73,7 +73,7 @@ krb5_gss_wrap_size_limit(minor_status, context_handle, conf_req_flag,
             * Cannot have trailer length that will cause us to pad over
             * our length
             */
-           *max_input_size = (req_output_size - ohlen) & (~7);
+           *max_input_size = (req_output_size - ohlen - 1) & (~7);
     else
            *max_input_size = 0;
     *minor_status = 0;