[krbdev.mit.edu #8852] git commit

Greg Hudson via RT rt at KRBDEV-PROD-APP-1.mit.edu
Mon Dec 9 18:23:22 EST 2019


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8852 >


Various gssalloc fixes

The DEBUG_GSSALLOC version of gssalloc_realloc() must add the sentinel
size to the byte count.

The mechglue gss_decapsulate_token(), gss_encapsulate_token(), and
gss_export_sec_context() must use gssalloc_malloc() to allocate
output buffers.

The krb5 mech's gss_export_name_composite() and gss_pseudo_random()
implementations must use gssalloc_malloc() to allocate output buffers.

SPNEGO's gss_display_status() implementation must use gssalloc for the
output buffer.

The sample GSS server must use gss_release_buffer() to free the result
of gss_export_sec_context().

(cherry picked from commit ab5c4259bdbe51dd3f4b5c5aff22628188d04322)

https://github.com/krb5/krb5/commit/0298a87c31405665c686df0b9aff0fe93dcda072
Author: Greg Hudson <ghudson at mit.edu>
Commit: 0298a87c31405665c686df0b9aff0fe93dcda072
Branch: krb5-1.16
 src/appl/gss-sample/gss-server.c              |    2 +-
 src/lib/gssapi/generic/gssapi_alloc.h         |    2 +-
 src/lib/gssapi/krb5/naming_exts.c             |    2 +-
 src/lib/gssapi/krb5/prf.c                     |    2 +-
 src/lib/gssapi/mechglue/g_decapsulate_token.c |    2 +-
 src/lib/gssapi/mechglue/g_encapsulate_token.c |    2 +-
 src/lib/gssapi/mechglue/g_exp_sec_context.c   |    2 +-
 src/lib/gssapi/spnego/spnego_mech.c           |    2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)



More information about the krb5-bugs mailing list