From: Daniel P. Berrangé <berrange@redhat.com>
Date: Wed, 11 Sep 2024 12:17:04 +0000 (+0100)
Subject: ui/vnc: don't check for SSF after SASL authentication on UNIX sockets
X-Git-Tag: v9.2.0-rc0~38^2~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2b69564798f3cd43ab9bdf70a96d2373cb544a9a;p=thirdparty%2Fqemu.git

ui/vnc: don't check for SSF after SASL authentication on UNIX sockets

Although we avoid requesting an SSF when querying SASL mechanisms for a
UNIX socket client, we still mistakenly checked for availability of an
SSF once the SASL auth process is complete.

Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---

diff --git a/ui/vnc-auth-sasl.c b/ui/vnc-auth-sasl.c
index 43515447fb7..25f6b4b7765 100644
--- a/ui/vnc-auth-sasl.c
+++ b/ui/vnc-auth-sasl.c
@@ -628,7 +628,7 @@ void start_auth_sasl(VncState *vs)
             goto authabort;
         }
     } else {
-        vs->sasl.wantSSF = 1;
+        vs->sasl.wantSSF = !vnc_socket_is_unix(vs->sioc);
     }
 
     memset (&secprops, 0, sizeof secprops);