ignore, don't reject, unknown flags; thanks, Sam

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/raeburn-gssapi-cfx@15857 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/gssapi/krb5/k5sealv3.c b/src/lib/gssapi/krb5/k5sealv3.c
index 5cb14dfc2c86b5e3a914204b973318738f8582a1..670dbe56808ea81976bfb21dfde57ee93c501252 100644 (file)
--- a/src/lib/gssapi/krb5/k5sealv3.c
+++ b/src/lib/gssapi/krb5/k5sealv3.c
@@ -359,8 +359,6 @@ gss_krb5int_unseal_token_v3(krb5_context *contextptr,
     if (toktype == KG_TOK_WRAP_MSG) {
        if (load_16_be(ptr) != 0x0504)
            DEFECTIVE;
-       if (ptr[2] & ~0xe0)
-           DEFECTIVE;
        if (ptr[3] != 0xff)
            DEFECTIVE;
        ec = load_16_be(ptr+4);
@@ -485,9 +483,6 @@ gss_krb5int_unseal_token_v3(krb5_context *contextptr,
            DEFECTIVE;
     LOG();
     verify_mic_1:
-    LOG();
-       if (ptr[2] & ~0xe0)
-           DEFECTIVE;
     LOG();
        if (ptr[3] != 0xff)
            DEFECTIVE;