In init_ctx_cont, if the response token contains no fields, we set a
return value but don't actually quit out of the function. We do not
need this check (we will fail later on if a piece of required
information isn't present), so just remove it. Reported by
simo@redhat.com.
responseToken, mechListMIC);
if (ret != GSS_S_COMPLETE)
goto cleanup;
- if (acc_negState == ACCEPT_DEFECTIVE_TOKEN &&
- supportedMech == GSS_C_NO_OID &&
- *responseToken == GSS_C_NO_BUFFER &&
- *mechListMIC == GSS_C_NO_BUFFER) {
- /* Reject "empty" token. */
- ret = GSS_S_DEFECTIVE_TOKEN;
- }
if (acc_negState == REJECT) {
*minor_status = ERR_SPNEGO_NEGOTIATION_FAILED;
map_errcode(minor_status);