[krbdev.mit.edu #7926] 1.12 breaks gssapi mechanisms that recursively call into libgssapi

Sam Hartman via RT rt-comment at krbdev.mit.edu
Wed May 28 21:48:33 EDT 2014



dlsym on Unix doesn't have a great way to limit behavior so that  it
will give you symbols from a module but *not* from its dependencies.
So, if you're looking up whether a module has a given symbol then
So, for all the GSS entry points you'll find them if you look for them
in  something that recursively loads libgssapi_krb5.

Something seems to have broken; I'm seeing moonshot's mechanism  crash
with a stack overflow looping through calls to gss_add_cred_from.

I haven't looked at exactly what changed, but wanted to open the bug and
will follow up with details.



More information about the krb5-bugs mailing list