upstream: make gssapi-with-mic with malformed OIDs count against

MaxAuthTries

Anthropic ANT-2026-8FJ7M9MP

OpenBSD-Commit-ID: 692d5e08a708a04f036efed5ff3f012a15a01ddd

auth2-gss.c

@@ -1,4 +1,4 @@
-/* $OpenBSD: auth2-gss.c,v 1.42 2026/07/07 02:17:18 djm Exp $ */
+/* $OpenBSD: auth2-gss.c,v 1.43 2026/10/30 01:30:55 djm Exp $ */
 
 /*
  * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@@ -101,7 +101,10 @@ userauth_gssapi(struct ssh *ssh, const char *method)
 			goid.length   = len - 2;
 			ssh_gssapi_test_oid_supported(&ms, &goid, &present);
 		} else {
+			/* client error; counts against MaxAuthTries */
 			logit_f("badly formed OID received");
+			free(doid);
+			return (0);
 		}
 	} while (mechs > 0 && !present);