add some documentation/asserts

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/authdata@22666 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/authdata.c b/src/lib/krb5/krb/authdata.c
index a2676832e48a277e6732003e24015661f401f762..055219a99835e04cc126c321facaba8d87d23063 100644 (file)
--- a/src/lib/krb5/krb/authdata.c
+++ b/src/lib/krb5/krb/authdata.c
@@ -320,12 +320,19 @@ k5_get_kdc_issued_authdata(krb5_context kcontext,
     if (code != 0)
         return code;
 
+    /*
+     * Note: a module must still implement a verify_authdata
+     * method, even it is a NOOP that simply records the value
+     8 of kdc_issued_flag.
+     */
     code = krb5_verify_authdata_kdc_issued(kcontext,
                                            ap_req->ticket->enc_part2->session,
                                            authdata[0],
                                            kdc_issuer,
                                            kdc_issued_authdata);
 
+    assert(code == 0 || *kdc_issued_authdata == NULL);
+
     krb5_free_authdata(kcontext, authdata);
 
     return code;