2  * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan
17  * 3. Neither the name of the Institute nor the names of its contributors
49     c = safe->cksum;  in verify_checksum()
50     safe->cksum.cksumtype       = 0;  in verify_checksum()
51     safe->cksum.checksum.data   = NULL;  in verify_checksum()
52     safe->cksum.checksum.length = 0;  in verify_checksum()
60     if (auth_context->remote_subkey)  in verify_checksum()
61 	key = auth_context->remote_subkey;  in verify_checksum()
62     else if (auth_context->local_subkey)  in verify_checksum()
63 	key = auth_context->local_subkey;  in verify_checksum()
65 	key = auth_context->keyblock;  in verify_checksum()
73 				buf + buf_size - len,  in verify_checksum()
78     safe->cksum = c;  in verify_checksum()
96     if ((auth_context->flags &  in krb5_rd_safe()
105 	/* if these fields are not present in the safe-part, silently  in krb5_rd_safe()
110     ret = decode_KRB_SAFE (inbuf->data, inbuf->length, &safe, &len);  in krb5_rd_safe()
133 	&& auth_context->remote_address  in krb5_rd_safe()
135 				  auth_context->remote_address,  in krb5_rd_safe()
145 	&& auth_context->local_address  in krb5_rd_safe()
147 				  auth_context->local_address,  in krb5_rd_safe()
154     /* check timestamp */  in krb5_rd_safe()
155     if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {  in krb5_rd_safe()
160 	if (safe.safe_body.timestamp == NULL ||  in krb5_rd_safe()
162 	    abs(*safe.safe_body.timestamp - sec) > context->max_skew) {  in krb5_rd_safe()
168     /* XXX - check replay cache */  in krb5_rd_safe()
174     if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_SEQUENCE) {  in krb5_rd_safe()
176 	     && auth_context->remote_seqnumber != 0)  in krb5_rd_safe()
179 		auth_context->remote_seqnumber)) {  in krb5_rd_safe()
184 	auth_context->remote_seqnumber++;  in krb5_rd_safe()
191     outbuf->length = safe.safe_body.user_data.length;  in krb5_rd_safe()
192     outbuf->data   = malloc(outbuf->length);  in krb5_rd_safe()
193     if (outbuf->data == NULL && outbuf->length != 0) {  in krb5_rd_safe()
199     memcpy (outbuf->data, safe.safe_body.user_data.data, outbuf->length);  in krb5_rd_safe()
201     if ((auth_context->flags &  in krb5_rd_safe()
204 	if(safe.safe_body.timestamp)  in krb5_rd_safe()
205 	    outdata->timestamp = *safe.safe_body.timestamp;  in krb5_rd_safe()
207 	    outdata->usec = *safe.safe_body.usec;  in krb5_rd_safe()
209 	    outdata->seq = *safe.safe_body.seq_number;  in krb5_rd_safe()