[krbdev.mit.edu #7926] git commit
Tom Yu via RT
rt-comment at krbdev.mit.edu
Fri Jun 27 13:15:22 EDT 2014
Do not loop on add_cred_from and other new methods
Several new GSS-API methods were added but GSSAPI_ADD_METHOD was
called to add them rather than GSSAPI_ADD_METHOD_NOLOOP. This means
that the implementation from the GSS-API mechglue would be used if the
mechanism had no implementation. As a result, the mechglue will call
into itself exhausting the call stack in an endless loop when one of
these methods is called.
(cherry picked from commit 41d38531043b99e8daa334f2b6ddf376adf1e878)
https://github.com/krb5/krb5/commit/62e3a3372ac483fca2f996fe12109d3536fd1d3e
Author: Sam Hartman <hartmans at debian.org>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 62e3a3372ac483fca2f996fe12109d3536fd1d3e
Branch: krb5-1.12
src/lib/gssapi/mechglue/g_initialize.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
More information about the krb5-bugs
mailing list