Russ Allbery wrote:
It looks like this only fails when gss_init_sec_context returns an error,
and RFC 2744 isn't entirely clear on whether the output token is supposed
to be initialized in that case, but I can certainly see the convenience
argument for doing so.
I find the example code in RFC 2744 section 5.19 to be perfectly clear:
the value of output_token->length is used even when GSS_ERROR(maj_stat)
is true. I'm not aware of any stipulation to the effect that examples in
RFCs aren't normative; and in any case it would be bad form to use a
buggy example without labelling it as such.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
