A zero-length token should be treated like a GSS_C_NO_BUFFER during

the initial context establishment.  [krb5-libs/352]

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10026 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog
index b8d8e366b03bbfb4ffe580b90ee890a852b2d9d8..8bc5e8baf3af76cd808adc33db249243da371e32 100644 (file)
--- a/src/lib/gssapi/krb5/ChangeLog
+++ b/src/lib/gssapi/krb5/ChangeLog
@@ -1,3 +1,9 @@
+Tue Mar 25 01:00:55 1997  Theodore Y. Ts'o  <tytso@mit.edu>
+
+       * init_sec_context.c (krb5_gss_init_sec_context): A zero-length
+               token should be treated like a GSS_C_NO_BUFFER during the
+               initial context establishment.  [krb5-libs/352]
+
 Sat Feb 22 18:59:42 1997  Richard Basch  <basch@lehman.com>
 
        * Makefile.in: Use some of the new library list build rules in

diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c
index 2df91205fa6ca8069a12cb1423dfa0ab19d2b4f7..1c6d00a2c49dd0a4d6ef37422fcdd9cc4314b535 100644 (file)
--- a/src/lib/gssapi/krb5/init_sec_context.c
+++ b/src/lib/gssapi/krb5/init_sec_context.c
@@ -303,9 +303,9 @@ krb5_gss_init_sec_context(minor_status, claimant_cred_handle,
         return(GSS_S_NO_CRED);
       }
 
-      /* complain if the input token is nonnull */
+      /* complain if the input token is non-null */
 
-      if (input_token != GSS_C_NO_BUFFER) {
+      if (input_token != GSS_C_NO_BUFFER && input_token->length != 0) {
         *minor_status = 0;
         return(GSS_S_DEFECTIVE_TOKEN);
       }