From 2932f170a6c1eacfcd47b4269371c4acf3ffa6d9 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Wed, 29 Apr 2015 13:24:56 +0200 Subject: [PATCH] gssapi: avoid comparison with null mechanism --- src/auth/gssapi.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/auth/gssapi.c b/src/auth/gssapi.c index b35220fb..57875a27 100644 --- a/src/auth/gssapi.c +++ b/src/auth/gssapi.c @@ -187,7 +187,8 @@ static int verify_krb5_constraints(struct gssapi_ctx_st *pctx, gss_OID mech_type OM_uint32 minor; krb5_timestamp authtime; - if (((mech_type->length != gss_mech_krb5->length || memcmp(mech_type->elements, gss_mech_krb5->elements, mech_type->length) != 0) && + if (mech_type == NULL || + ((mech_type->length != gss_mech_krb5->length || memcmp(mech_type->elements, gss_mech_krb5->elements, mech_type->length) != 0) && (mech_type->length != gss_mech_krb5_old->length || memcmp(mech_type->elements, gss_mech_krb5_old->elements, mech_type->length) != 0)) || ticket_freshness_secs == 0) { return 0;