In krb5_calculate_checksum (a compatibility routine), initialize

key.enctype to ENCTYPE_NULL.  This will predictably fail to match a
keyed hash's enctype, which may not be the best behavior, but is
better than unpredictably failing to match it.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22867 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/crypto/krb/old_api_glue.c b/src/lib/crypto/krb/old_api_glue.c
index c0cfdb17982401ad40546118a05c44a8ba8ec9c8..0688d7fe345a2622e19b67581d40a138a86ce4a7 100644 (file)
--- a/src/lib/crypto/krb/old_api_glue.c
+++ b/src/lib/crypto/krb/old_api_glue.c
@@ -215,6 +215,7 @@ krb5_calculate_checksum(krb5_context context, krb5_cksumtype ctype,
     input.data = in;
     input.length = in_length;
 
+    key.enctype = ENCTYPE_NULL;
     key.length = seed_length;
     key.contents = seed;