[PATCH 2/2] _gsasl_gssapi_server_step: avoid empty challenge

[Andreas Oberritter]

- advance to step 2 immediately, if step 1 completes
  (maj_stat == GSS_S_COMPLETE) without any output data.

Signed-off-by: Andreas Oberritter <address@hidden>
---
 lib/gssapi/server.c |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/lib/gssapi/server.c b/lib/gssapi/server.c
index edc62d7..9d8ff13 100644
--- a/lib/gssapi/server.c
+++ b/lib/gssapi/server.c
@@ -174,8 +174,11 @@ _gsasl_gssapi_server_step (Gsasl_session * sctx,
       if (maj_stat == GSS_S_COMPLETE)
        state->step++;
 
-      res = GSASL_NEEDS_MORE;
-      break;
+      if (maj_stat == GSS_S_CONTINUE_NEEDED || *output_len) {
+        res = GSASL_NEEDS_MORE;
+        break;
+      }
+      /* fall through */
 
     case 2:
       memset (tmp, 0xFF, 4);