check attribute, cleanup

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/signedpath-naming-exts@23982 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/s4u_authdata.c b/src/lib/krb5/krb/s4u_authdata.c
index 0c079bdcc55540448bc64e9ba0bb7db3c1390cbf..d08008335a028c094065612703741f1cd1416bc2 100644 (file)
--- a/src/lib/krb5/krb/s4u_authdata.c
+++ b/src/lib/krb5/krb/s4u_authdata.c
@@ -309,8 +309,13 @@ s4u2proxy_get_attribute(krb5_context kcontext,
         display_value->length = 0;
     }
 
+    if (!data_eq(*attribute, s4u2proxy_transited_services_attr))
+        return ENOENT;
+
     i = -(*more) - 1;
-    if (i < 0 || i >= s4uctx->count)
+    if (i < 0)
+        return EINVAL;
+    else if (i >= s4uctx->count)
         return ENOENT;
 
     principal = s4uctx->delegated[i];