Line data Source code
1 : /*
2 : * Copyright (c) 1997 - 2001 Kungliga Tekniska Högskolan
3 : * (Royal Institute of Technology, Stockholm, Sweden).
4 : * All rights reserved.
5 : *
6 : * Redistribution and use in source and binary forms, with or without
7 : * modification, are permitted provided that the following conditions
8 : * are met:
9 : *
10 : * 1. Redistributions of source code must retain the above copyright
11 : * notice, this list of conditions and the following disclaimer.
12 : *
13 : * 2. Redistributions in binary form must reproduce the above copyright
14 : * notice, this list of conditions and the following disclaimer in the
15 : * documentation and/or other materials provided with the distribution.
16 : *
17 : * 3. Neither the name of the Institute nor the names of its contributors
18 : * may be used to endorse or promote products derived from this software
19 : * without specific prior written permission.
20 : *
21 : * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 : * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 : * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 : * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 : * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 : * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 : * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 : * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 : * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 : * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 : * SUCH DAMAGE.
32 : */
33 :
34 : #include "krb5_locl.h"
35 :
36 : KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
37 48403 : krb5_rd_rep(krb5_context context,
38 : krb5_auth_context auth_context,
39 : const krb5_data *inbuf,
40 : krb5_ap_rep_enc_part **repl)
41 : {
42 : krb5_error_code ret;
43 : AP_REP ap_rep;
44 : size_t len;
45 : krb5_data data;
46 : krb5_crypto crypto;
47 :
48 48403 : krb5_data_zero (&data);
49 :
50 48403 : ret = decode_AP_REP(inbuf->data, inbuf->length, &ap_rep, &len);
51 48403 : if (ret)
52 0 : return ret;
53 48403 : if (ap_rep.pvno != 5) {
54 0 : ret = KRB5KRB_AP_ERR_BADVERSION;
55 0 : krb5_clear_error_message (context);
56 0 : goto out;
57 : }
58 48403 : if (ap_rep.msg_type != krb_ap_rep) {
59 0 : ret = KRB5KRB_AP_ERR_MSG_TYPE;
60 0 : krb5_clear_error_message (context);
61 0 : goto out;
62 : }
63 :
64 48403 : ret = krb5_crypto_init(context, auth_context->keyblock, 0, &crypto);
65 48403 : if (ret)
66 0 : goto out;
67 48403 : ret = krb5_decrypt_EncryptedData (context,
68 : crypto,
69 : KRB5_KU_AP_REQ_ENC_PART,
70 : &ap_rep.enc_part,
71 : &data);
72 48403 : krb5_crypto_destroy(context, crypto);
73 48403 : if (ret)
74 0 : goto out;
75 :
76 48403 : *repl = malloc(sizeof(**repl));
77 48403 : if (*repl == NULL) {
78 0 : ret = ENOMEM;
79 0 : krb5_set_error_message(context, ret, N_("malloc: out of memory", ""));
80 0 : goto out;
81 : }
82 48403 : ret = decode_EncAPRepPart(data.data, data.length, *repl, &len);
83 48403 : if (ret) {
84 0 : krb5_set_error_message(context, ret, N_("Failed to decode EncAPRepPart", ""));
85 0 : return ret;
86 : }
87 :
88 48403 : if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {
89 40570 : if ((*repl)->ctime != auth_context->authenticator->ctime ||
90 20285 : (*repl)->cusec != auth_context->authenticator->cusec)
91 : {
92 0 : krb5_free_ap_rep_enc_part(context, *repl);
93 0 : *repl = NULL;
94 0 : ret = KRB5KRB_AP_ERR_MUT_FAIL;
95 0 : krb5_clear_error_message (context);
96 0 : goto out;
97 : }
98 : }
99 48403 : if ((*repl)->seq_number)
100 48403 : krb5_auth_con_setremoteseqnumber(context, auth_context,
101 48403 : *((*repl)->seq_number));
102 48403 : if ((*repl)->subkey)
103 20285 : krb5_auth_con_setremotesubkey(context, auth_context, (*repl)->subkey);
104 :
105 76521 : out:
106 48403 : krb5_data_free (&data);
107 48403 : free_AP_REP (&ap_rep);
108 48403 : return ret;
109 : }
110 :
111 : KRB5_LIB_FUNCTION void KRB5_LIB_CALL
112 48403 : krb5_free_ap_rep_enc_part (krb5_context context,
113 : krb5_ap_rep_enc_part *val)
114 : {
115 48403 : if (val) {
116 48403 : free_EncAPRepPart (val);
117 48403 : free (val);
118 : }
119 48403 : }
|