1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-23 09:57:40 +03:00

auth/spnego: make sure we don't return OK without sub_sec_ready in gensec_spnego_client_negTokenTarg()

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
Stefan Metzmacher 2017-07-17 20:49:34 +02:00 committed by Andreas Schneider
parent f7f9de406a
commit a97057d5b8

View File

@ -844,6 +844,12 @@ static NTSTATUS gensec_spnego_client_negTokenTarg(struct gensec_security *gensec
if (sub_out.length == 0 && mech_list_mic.length == 0) {
*out = data_blob_null;
if (!spnego_state->sub_sec_ready) {
/* somethings wrong here... */
DBG_ERR("gensec_update not ready without output\n");
return NT_STATUS_INTERNAL_ERROR;
}
if (ta->negResult != SPNEGO_ACCEPT_COMPLETED) {
/* unless of course it did not accept */
DBG_WARNING("gensec_update ok but not accepted\n");