Jacob correctly points out that I accidentally lost a clearing of

s->gss_sndtok in r8326.  I'm not sure it was strictly necessary, since
even if there's no send token, gss_init_sec_context() is meant to explicitly
make it empty, but it wasn't an intentional change.

[originally from svn r8337]
[r8326 == 81dafd906eb4817393fabe4d408c16de8586de8b]

diff --git a/ssh.c b/ssh.c
index 6a882b796aeece1554ac31b6ade11a830f45abe5..3eff2cfde2a9758e0dd736a496e99fb0678a3b3a 100644 (file)
--- a/ssh.c
+++ b/ssh.c
@@ -7960,6 +7960,7 @@ static void do_ssh2_authconn(Ssh ssh, unsigned char *in, int inlen,
 
                /* initial tokens are empty */
                SSH_GSS_CLEAR_BUF(&s->gss_rcvtok);
+               SSH_GSS_CLEAR_BUF(&s->gss_sndtok);
 
                /* now enter the loop */
                do {