auth:gensec: Zero digest array in error case

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/auth/gensec/schannel.c b/auth/gensec/schannel.c
index 1f8680743e9825b575e57ff8d98985a7af5a4561..86527fe46858cc09059f5efb47a6f5ca0348992f 100644 (file)
--- a/auth/gensec/schannel.c
+++ b/auth/gensec/schannel.c
@@ -208,12 +208,11 @@ static NTSTATUS netsec_do_seq_num(struct schannel_state *state,
                                      checksum,
                                      checksum_length,
                                      _sequence_key);
+               ZERO_ARRAY(digest1);
                if (rc < 0) {
                        return gnutls_error_to_ntstatus(rc, NT_STATUS_HMAC_NOT_SUPPORTED);
                }
 
-               ZERO_ARRAY(digest1);
-
                rc = gnutls_cipher_init(&cipher_hnd,
                                        GNUTLS_CIPHER_ARCFOUR_128,
                                        &sequence_key,