From a97057d5b88c02bb3874f2dfe2ed5a8c2edfc596 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Mon, 17 Jul 2017 20:49:34 +0200 Subject: auth/spnego: make sure we don't return OK without sub_sec_ready in gensec_spnego_client_negTokenTarg() Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider --- auth/gensec/spnego.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'auth') diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c index 87a0791149f..22abad342b1 100644 --- a/auth/gensec/spnego.c +++ b/auth/gensec/spnego.c @@ -844,6 +844,12 @@ static NTSTATUS gensec_spnego_client_negTokenTarg(struct gensec_security *gensec if (sub_out.length == 0 && mech_list_mic.length == 0) { *out = data_blob_null; + if (!spnego_state->sub_sec_ready) { + /* somethings wrong here... */ + DBG_ERR("gensec_update not ready without output\n"); + return NT_STATUS_INTERNAL_ERROR; + } + if (ta->negResult != SPNEGO_ACCEPT_COMPLETED) { /* unless of course it did not accept */ DBG_WARNING("gensec_update ok but not accepted\n"); -- cgit v1.2.1