[krbdev.mit.edu #9183] git commit

"Greg Hudson via RT" <[email protected]> Tue, 27 Jan 2026 23:48:59 -0500

Newsgroups	gmane.comp.encryption.kerberos.bugs
Message-ID	<[email protected]>

<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9183 >


Fix SPNEGO mechListMIC parsing

Commit fdceb225f881e2b1337eebcb9a9443fa4a9be3fd erroneously altered
get_negTokenResp() to look for mechListMIC with tag 0xA4 instead of
0xA3.  Fix it.

Restore the t_spnego.c reselection test by constructing a
two-mechanism SPNEGO initiator credential using the internal
structures.

[[email protected]: added test case; rewrote commit message]

(cherry picked from commit 942c5036e14066a1f4badfdf67716c47f2e33a39)

https://github.com/krb5/krb5/commit/9a84b340382ac0d5a045a44d17a9f8ce8ab89afc
Author: dovsyannikov <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 9a84b340382ac0d5a045a44d17a9f8ce8ab89afc
Branch: krb5-1.22
 src/lib/gssapi/spnego/spnego_mech.c |  2 +-
 src/tests/gssapi/Makefile.in        |  2 +-
 src/tests/gssapi/deps               | 19 ++++++++++--
 src/tests/gssapi/t_spnego.c         | 60 +++++++++++++++++++++++++++++--------
 4 files changed, 66 insertions(+), 17 deletions(-)