CVS gss/lib/krb5

[gss-commit]

Update of /home/cvs/gss/lib/krb5
In directory dopio:/tmp/cvs-serv3653

Modified Files:
        context.c 
Log Message:
(gss_krb5_accept_sec_context): Extract sequence numbers, for gss_wrap
and gss_unwrap.


--- /home/cvs/gss/lib/krb5/context.c    2004/10/14 18:34:37     1.54
+++ /home/cvs/gss/lib/krb5/context.c    2004/10/14 20:26:10     1.55
@@ -353,6 +353,12 @@
       return GSS_S_FAILURE;
     }
 
+  rc = shishi_authenticator_seqnumber_get (cxk5->sh,
+                                          shishi_ap_authenticator (cxk5->ap),
+                                          &cxk5->initseqnr);
+  if (rc != SHISHI_OK)
+    return GSS_S_FAILURE;
+
   if (shishi_ap_authenticator_cksumtype (cxk5->ap) != 0x8003)
     {
       if (minor_status)
@@ -376,6 +382,17 @@
          return GSS_S_FAILURE;
        }
 
+      rc = shishi_encapreppart_seqnumber_get (cxk5->sh,
+                                             shishi_ap_encapreppart (cxk5->ap),
+                                             &cxk5->acceptseqnr);
+      if (rc != SHISHI_OK)
+       {
+         /* A strict 1964 implementation would return
+            GSS_S_DEFECTIVE_TOKEN here.  gssapi-cfx permit absent
+            sequence number, though. */
+         cxk5->acceptseqnr = 0;
+       }
+
       rc = shishi_asn1_to_der (crk5->sh, aprep,
                               (char **) &data.value, &data.length);
       if (rc != SHISHI_OK)