[krbdev.mit.edu #8932] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Wed Sep 09 17:02:54 2020: Request 8932 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8932 > Do proper length decoding in SPNEGO gss_get_oid() When reading an OID in a SPNEGO token, use gssint_get_der_length() rather than assuming the length fits in one byte. Although OID lengths greater than 127 are unlikely, some NetApp products have been observed to incorrectly encode the length in multiple bytes. Reported by Richard Sharpe. https://github.com/krb5/krb5/commit/f712fa5a94438096d3c2449babe4aca9c17d7feb Author: Greg Hudson <[email protected]> Commit: f712fa5a94438096d3c2449babe4aca9c17d7feb Branch: master src/lib/gssapi/spnego/spnego_mech.c | 13 ++++++------- 1 files changed, 6 insertions(+), 7 deletions(-)