[krbdev.mit.edu #9214] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Mon Aug 31 22:47:45 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9214 >


Fix gss_add_cred() extension fallback path

In copy_mech_cred(), if we fall back to using the mechanism's
gss_inquire_cred() and gss_acquire_cred(), correctly release the
mechanism name, and map the minor status if a mechanism call fails.
Reported by Daniel Sands.

This helper function is only reached if an application calls
gss_add_cred() with non-null input_cred_handle and output_cred_handle.
It was introduced in commit 288cbada833dc6af7d43dd308563b48b73347dfb
(ticket 8734).

(cherry picked from commit d4c96c2279855b2064ebef192434382118d101e8)

https://github.com/krb5/krb5/commit/e4d263f9e22221d7354631bcbbd0e27fae8515bd
Author: Greg Hudson <ghudson at mit.edu>
Commit: e4d263f9e22221d7354631bcbbd0e27fae8515bd
Branch: krb5-1.22
 src/lib/gssapi/mechglue/g_acquire_cred.c | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list