auth/gensec: don't allow gensec_update[_ev] to be called on a subcontext

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/auth/gensec/gensec.c b/auth/gensec/gensec.c
index 6a747ca3601c241dbc2ca5a8f63c6dddc022ad14..f3969b4129be2cfaebba441a77c415b7d6aff694 100644 (file)
--- a/auth/gensec/gensec.c
+++ b/auth/gensec/gensec.c
@@ -329,6 +329,13 @@ _PUBLIC_ NTSTATUS gensec_update_ev(struct gensec_security *gensec_security,
        struct tevent_req *subreq = NULL;
        bool ok;
 
+       if (gensec_security->subcontext) {
+               /*
+                * gensec modules are not allowed to call the sync version.
+                */
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+
        frame = talloc_stackframe();
 
        if (ev == NULL) {