* send_tgs.c: krb5_send_tgs() was broken in the case of a KRB_ERROR

      message.  The krb5_response message_type field was never set
      resulting in stack garbage being used instead.  This would
      break code which used transitive cross-realm to obtain service
      tickets.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16331 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index 9305d9014f79895632c2cdb9c6dfbf0b59aba339..736eeba80b307064204a6e199499f06ae215873c 100644 (file)
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,11 @@
+2004-05-12  Jeffrey Altman <jaltman@mit.edu>
+
+    * send_tgs.c: krb5_send_tgs() was broken in the case of a KRB_ERROR
+      message.  The krb5_response message_type field was never set 
+      resulting in stack garbage being used instead.  This would 
+      break code which used transitive cross-realm to obtain service
+      tickets.
+
 2004-04-24  Ken Raeburn  <raeburn@mit.edu>
 
        * conv_creds.c (krb524_init_ets, krb524_convert_creds_kdc): Add

diff --git a/src/lib/krb5/krb/send_tgs.c b/src/lib/krb5/krb/send_tgs.c
index 3b6b24288bd31e6957f57650b1466a21a4f56f6e..a5ffe1d4bd25f8cc2f5d956e3f58963b625468fe 100644 (file)
--- a/src/lib/krb5/krb/send_tgs.c
+++ b/src/lib/krb5/krb/send_tgs.c
@@ -279,6 +279,7 @@ send_again:
                }
                krb5_free_error(context, err_reply);
            }
+           rep->message_type = KRB5_ERROR;
        } else if (krb5_is_tgs_rep(&rep->response))
            rep->message_type = KRB5_TGS_REP;
         else /* XXX: assume it's an error */