krb5 commit: Fix SPNEGO imported cred initialization

Greg Hudson ghudson at mit.edu
Thu Aug 18 14:30:36 EDT 2016


https://github.com/krb5/krb5/commit/1bedcf7fc43e45882edcb9eb17d0852a30babae3
commit 1bedcf7fc43e45882edcb9eb17d0852a30babae3
Author: Greg Hudson <ghudson at mit.edu>
Date:   Wed Jul 20 17:08:55 2016 -0400

    Fix SPNEGO imported cred initialization
    
    In spnego_gss_import_cred(), use create_spnego_cred() to create the
    SPNEGO credential structure.  Prior to this change, an imported SPNEGO
    cred did not initialize the no_ask_integ field (added by commit
    cf39ed349976908626cad3e05e17788f8334bce9, ticket #6938).
    
    ticket: 8460 (new)
    target_version: 1.14-next
    tags: pullup

 src/lib/gssapi/spnego/spnego_mech.c |   13 +++++--------
 1 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/src/lib/gssapi/spnego/spnego_mech.c b/src/lib/gssapi/spnego/spnego_mech.c
index 7862d98..9d6027c 100644
--- a/src/lib/gssapi/spnego/spnego_mech.c
+++ b/src/lib/gssapi/spnego/spnego_mech.c
@@ -2993,14 +2993,11 @@ spnego_gss_import_cred(OM_uint32 *minor_status,
 	ret = gss_import_cred(minor_status, token, &mcred);
 	if (GSS_ERROR(ret))
 		return (ret);
-	spcred = malloc(sizeof(*spcred));
-	if (spcred == NULL) {
-		gss_release_cred(minor_status, &mcred);
-		*minor_status = ENOMEM;
-		return (GSS_S_FAILURE);
-	}
-	spcred->mcred = mcred;
-	spcred->neg_mechs = GSS_C_NULL_OID_SET;
+
+	ret = create_spnego_cred(minor_status, mcred, &spcred);
+	if (GSS_ERROR(ret))
+	    return (ret);
+
 	*cred_handle = (gss_cred_id_t)spcred;
 	return (ret);
 }


More information about the cvs-krb5 mailing list