[krbdev.mit.edu #7488] SVN Commit

[Tom Yu via RT]

Fix various integer issues

In kdc_util.c and spnego_mech.c, error returns from ASN.1 length
functions could be ignored because they were assigned to unsigned
values.  In spnego_mech.c, two buffer size checks could be rewritten
to reduce the likelihood of pointer overflow.  In dump.c and
kdc_preauth.c, calloc() could be used to simplify the code and avoid
multiplication overflow.

Reported by Nickolai Zeldovich <nickolai at csail.mit.edu>.

(cherry picked from commit d3c5450ddf0b20855e86dab41735d56c6860156b)

[tlyu at mit.edu: omitted pkinit fix because it's not conservative]

https://github.com/krb5/krb5/commit/760bcda6c627e66684b54285f744f5584b804642
Author: Tom Yu <tlyu at mit.edu>
Commit: 760bcda6c627e66684b54285f744f5584b804642
Branch: krb5-1.11
 src/kadmin/dbutil/dump.c            |    3 +--
 src/kdc/kdc_preauth.c               |    3 +--
 src/kdc/kdc_util.c                  |    3 ++-
 src/lib/gssapi/spnego/spnego_mech.c |    6 +++---
 4 files changed, 7 insertions(+), 8 deletions(-)