Projet

Général

Profil

0001-Prevent-multiple-OneTimeUse-elements-52961.patch

Benjamin Dauvergne, 24 juin 2021 02:22

Télécharger (1,41 ko)

Voir les différences: 

Subject: [PATCH] Prevent multiple OneTimeUse elements (#52961)

"A SAML authority MUST NOT include more than one <OneTimeUse> element within a
<Conditions>element of an assertion"

 lasso/saml-2.0/saml2_helper.c | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)
lasso/saml-2.0/saml2_helper.c
333 333 
	g_return_if_fail (LASSO_IS_SAML2_ASSERTION (saml2_assertion));
334 334 

  		




  335
  335
  
    
	saml2_conditions = lasso_saml2_assertion_get_conditions(saml2_assertion, TRUE);

  		




  336
  
  
    
	lasso_list_add_new_gobject (saml2_conditions->OneTimeUse, lasso_saml2_one_time_use_new());

  		




  337
  336
  
    
	if (one_time_use) {

  		




  338
  
  
    
		lasso_list_add_new_gobject(saml2_conditions->OneTimeUse,

  		




  339
  
  
    
				lasso_saml2_one_time_use_new());

  		




  
  337
  
    
		if (! saml2_conditions->OneTimeUse) {

  		




  
  338
  
    
			lasso_list_add_new_gobject(saml2_conditions->OneTimeUse,

  		




  
  339
  
    
					lasso_saml2_one_time_use_new());

  		




  
  340
  
    
		}

  		




  340
  341
  
    
	} else {

  		




  341
  
  
    
		lasso_release_list_of_gobjects(saml2_conditions->OneTimeUse);

  		




  
  342
  
    
		if (saml2_conditions->OneTimeUse) {

  		




  
  343
  
    
			lasso_release_list_of_gobjects(saml2_conditions->OneTimeUse);

  		




  
  344
  
    
		}

  		




  342
  345
  
    
	}

  		




  343
  346
  
    
}

  		




  344
  347
  
    

  		




  345
  
  
    
-