check oid value of krb5 spnego token during unmarshal (#353)

jcmturner · Jan 18, 2020 · 7c25130 · 7c25130
1 parent 8a3a3d7
commit 7c25130
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/spnego/krb5Token.go b/spnego/krb5Token.go
@@ -70,6 +70,9 @@ func (m *KRB5Token) Unmarshal(b []byte) error {
 	if err != nil {
 		return fmt.Errorf("error unmarshalling KRB5Token OID: %v", err)
 	}
+	if !oid.Equal(gssapi.OID(gssapi.OIDKRB5)) {
+		return fmt.Errorf("error unmarshalling KRB5Token, OID is %s not %s", oid.String(), gssapi.OID(gssapi.OIDKRB5).String())
+	}
 	m.OID = oid
 	if len(r) < 2 {
 		return fmt.Errorf("krb5token too short")