From: Luke Howard <lukeh@padl.com>
Date: Sat, 8 May 2010 17:16:03 +0000 (+0000)
Subject: check attribute, cleanup
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a1c92e765913d115ea5a6e41d79f6018521e09a5;p=thirdparty%2Fkrb5.git

check attribute, cleanup

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/signedpath-naming-exts@23982 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/s4u_authdata.c b/src/lib/krb5/krb/s4u_authdata.c
index 0c079bdcc5..d08008335a 100644
--- a/src/lib/krb5/krb/s4u_authdata.c
+++ b/src/lib/krb5/krb/s4u_authdata.c
@@ -309,8 +309,13 @@ s4u2proxy_get_attribute(krb5_context kcontext,
         display_value->length = 0;
     }
 
+    if (!data_eq(*attribute, s4u2proxy_transited_services_attr))
+        return ENOENT;
+
     i = -(*more) - 1;
-    if (i < 0 || i >= s4uctx->count)
+    if (i < 0)
+        return EINVAL;
+    else if (i >= s4uctx->count)
         return ENOENT;
 
     principal = s4uctx->delegated[i];