[krbdev.mit.edu #8852] git commit

"Greg Hudson via RT" <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
Tue Nov 26 18:50:55 2019: Request 8852 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8852 >



Various gssalloc fixes

The DEBUG_GSSALLOC version of gssalloc_realloc() must add the sentinel
size to the byte count.

The mechglue gss_decapsulate_token(), gss_encapsulate_token(), and
gss_export_sec_context() must use gssalloc_malloc() to allocate
output buffers.

The krb5 mech's gss_export_name_composite() and gss_pseudo_random()
implementations must use gssalloc_malloc() to allocate output buffers.

SPNEGO's gss_display_status() implementation must use gssalloc for the
output buffer.

The sample GSS server must use gss_release_buffer() to free the result
of gss_export_sec_context().

https://github.com/krb5/krb5/commit/ab5c4259bdbe51dd3f4b5c5aff22628188d04322
Author: Greg Hudson <[email protected]>
Commit: ab5c4259bdbe51dd3f4b5c5aff22628188d04322
Branch: master
 src/appl/gss-sample/gss-server.c              |    2 +-
 src/lib/gssapi/generic/gssapi_alloc.h         |    2 +-
 src/lib/gssapi/krb5/naming_exts.c             |    2 +-
 src/lib/gssapi/krb5/prf.c                     |    2 +-
 src/lib/gssapi/mechglue/g_decapsulate_token.c |    2 +-
 src/lib/gssapi/mechglue/g_encapsulate_token.c |    2 +-
 src/lib/gssapi/mechglue/g_exp_sec_context.c   |    2 +-
 src/lib/gssapi/spnego/spnego_mech.c           |    2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.