summaryrefslogtreecommitdiff
path: root/source3/utils
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2008-01-11 23:53:27 -0800
committerJeremy Allison <jra@samba.org>2008-01-11 23:53:27 -0800
commit43717a16e2fca8b196d4a89e33b05fefc0cb02d2 (patch)
treedf7a9e41c0f4e6b91e78a45d5e77ac4796fef54a /source3/utils
parent866af9a800cbfc022ce6144ee706c0826eb6c39b (diff)
downloadsamba-43717a16e2fca8b196d4a89e33b05fefc0cb02d2.tar.gz
samba-43717a16e2fca8b196d4a89e33b05fefc0cb02d2.tar.bz2
samba-43717a16e2fca8b196d4a89e33b05fefc0cb02d2.zip
Fix CID 476. Ensure a valid pac_data pointer is always passed to
ads_verify_ticket as it's always derefed. Jeremy. (This used to be commit 0599d57efff0f417f75510e8b08c3cb7b4bcfcd8)
Diffstat (limited to 'source3/utils')
-rw-r--r--source3/utils/ntlm_auth.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/source3/utils/ntlm_auth.c b/source3/utils/ntlm_auth.c
index 7e2771c900..6a702fc0cf 100644
--- a/source3/utils/ntlm_auth.c
+++ b/source3/utils/ntlm_auth.c
@@ -1163,6 +1163,7 @@ static void manage_gss_spnego_request(enum stdio_helper_mode stdio_helper_mode,
char *principal;
DATA_BLOB ap_rep;
DATA_BLOB session_key;
+ PAC_DATA *pac_data = NULL;
if ( request.negTokenInit.mechToken.data == NULL ) {
DEBUG(1, ("Client did not provide Kerberos data\n"));
@@ -1177,7 +1178,7 @@ static void manage_gss_spnego_request(enum stdio_helper_mode stdio_helper_mode,
status = ads_verify_ticket(mem_ctx, lp_realm(), 0,
&request.negTokenInit.mechToken,
- &principal, NULL, &ap_rep,
+ &principal, &pac_data, &ap_rep,
&session_key, True);
talloc_destroy(mem_ctx);