[krbdev.mit.edu #7926] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Thu Jun 5 12:29:38 EDT 2014
Do not loop on add_cred_from and other new methods
Several new GSS-API methods were added but GSSAPI_ADD_METHOD was
called to add them rather than GSSAPI_ADD_METHOD_NOLOOP. This means
that the implementation from the GSS-API mechglue would be used if the
mechanism had no implementation. As a result, the mechglue will call
into itself exhausting the call stack in an endless loop when one of
these methods is called.
https://github.com/krb5/krb5/commit/41d38531043b99e8daa334f2b6ddf376adf1e878
Author: Sam Hartman <hartmans at debian.org>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 41d38531043b99e8daa334f2b6ddf376adf1e878
Branch: master
src/lib/gssapi/mechglue/g_initialize.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
More information about the krb5-bugs
mailing list