[Heimdal-source-changes] [heimdal/heimdal] 815ea8: gss: mask out SAnon req_flags after computing sess...

[Luke Howard]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 815ea80b4fe2d755a5c9bad02d4c852ed201ba97
      https://github.com/heimdal/heimdal/commit/815ea80b4fe2d755a5c9bad02d4c852ed201ba97
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-27 (Mon, 27 Apr 2020)

  Changed paths:
    M lib/gssapi/sanon/accept_sec_context.c

  Log Message:
  -----------
  gss: mask out SAnon req_flags after computing session key

In SAnon, the optional flags send in the initial context token are input into
the key derivation function. Mask out the flags we wish to ignore after (not
before) calling the key derivation function, as the initiator may not know
which flags we wish to ignore.