[krbdev.mit.edu #7926] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Fri Jun 27 13:15:22 EDT 2014


Do not loop on add_cred_from and other new methods

Several new GSS-API methods were added but GSSAPI_ADD_METHOD was
called to add them rather than GSSAPI_ADD_METHOD_NOLOOP.  This means
that the implementation from the GSS-API mechglue would be used if the
mechanism had no implementation.  As a result, the mechglue will call
into itself exhausting the call stack in an endless loop when one of
these methods is called.

(cherry picked from commit 41d38531043b99e8daa334f2b6ddf376adf1e878)

https://github.com/krb5/krb5/commit/62e3a3372ac483fca2f996fe12109d3536fd1d3e
Author: Sam Hartman <hartmans at debian.org>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 62e3a3372ac483fca2f996fe12109d3536fd1d3e
Branch: krb5-1.12
 src/lib/gssapi/mechglue/g_initialize.c |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)



More information about the krb5-bugs mailing list