[krbdev.mit.edu #7926] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Jun 5 12:29:38 EDT 2014


Do not loop on add_cred_from and other new methods

Several new GSS-API methods were added but GSSAPI_ADD_METHOD was
called to add them rather than GSSAPI_ADD_METHOD_NOLOOP.  This means
that the implementation from the GSS-API mechglue would be used if the
mechanism had no implementation.  As a result, the mechglue will call
into itself exhausting the call stack in an endless loop when one of
these methods is called.

https://github.com/krb5/krb5/commit/41d38531043b99e8daa334f2b6ddf376adf1e878
Author: Sam Hartman <hartmans at debian.org>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 41d38531043b99e8daa334f2b6ddf376adf1e878
Branch: master
 src/lib/gssapi/mechglue/g_initialize.c |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)



More information about the krb5-bugs mailing list