[krbdev.mit.edu #9192] git commit
"Greg Hudson via RT" <[email protected]> Tue, 20 Jan 2026 19:45:37 -0500
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9192 > Fix minor logic errors In k5_externalize_auth_context(), serialize the correct field when local_port is set. This is not a reachable bug because the function is only accessible via gss_export_sec_context(), and the GSS library does not set a local port. Commit e50f46b210ddafe85cc917e2571516ade46bc65f fixed a similar bug for remote_port. In krb5_pac_get_types(), correct the allocation of *types_out. (The previous code was safe in spite of its incorrectness, because the size of a pointer is at least as big as the size of uint32_t.) Change make_spnego_tokenTarg_msg() to return 0 on success and -1 on failure, to match make_spnego_tokenInit_msg() and the expectations of its call sites. Commit fdceb225f881e2b1337eebcb9a9443fa4a9be3fd is partly to blame as it changed the return type from int to OM_uint32, but prior to that the function still returned GSS major codes rather than -1 on error. https://github.com/krb5/krb5/commit/5f4e17c8e2c31201628ab260f0991e8e47c8f1d2 Author: Greg Hudson <[email protected]> Commit: 5f4e17c8e2c31201628ab260f0991e8e47c8f1d2 Branch: master src/lib/gssapi/spnego/spnego_mech.c | 10 +++++----- src/lib/krb5/krb/pac.c | 2 +- src/lib/krb5/krb/ser_actx.c | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-)