From 26351cd1e90a113f722b6b12796edc9bf46c03d4 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Sat, 23 Apr 2016 05:17:25 +0200 Subject: [PATCH] auth/spnego: handle broken mechListMIC response from Windows 2000 MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit BUG: https://bugzilla.samba.org/show_bug.cgi?id=11870 Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider Reviewed-by: Günther Deschner (cherry picked from commit 032c2733dea834e2c95178cdd0deb73e7bb13621) --- auth/gensec/spnego.c | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c index 5126952a6d7..33a4b4688a3 100644 --- a/auth/gensec/spnego.c +++ b/auth/gensec/spnego.c @@ -1077,6 +1077,24 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA }; } + if (spnego.negTokenTarg.mechListMIC.length > 0) { + DATA_BLOB *m = &spnego.negTokenTarg.mechListMIC; + const DATA_BLOB *r = &spnego.negTokenTarg.responseToken; + + /* + * Windows 2000 has a bug, it repeats the + * responseToken in the mechListMIC field. + */ + if (m->length == r->length) { + int cmp; + + cmp = memcmp(m->data, r->data, m->length); + if (cmp == 0) { + data_blob_free(m); + } + } + } + if (spnego.negTokenTarg.mechListMIC.length > 0) { if (spnego_state->no_response_expected) { spnego_state->needs_mic_check = true; -- 2.34.1