gss-proxy.git/proxy/src/client, branch master

Add gss_acquire_cred_impersonate_name support

2015-12-01T22:45:53+00:00

This is used by a client that wants to peform a s4u2self operation
using its server credentials.

Signed-off-by: Simo Sorce 
Reviewed-by: Robbie Harwoood

Fix const warning that can lead to issues

2015-11-30T17:59:01+00:00

This could lead to a free() being called on a constant, and that wuld be bad.

Signed-off-by: Simo Sorce 
Reviewed-by: Robbie Harwood

Fix possible explicit NULL deref in gpm_accept_sec_context

2015-10-29T21:52:08+00:00

Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce

Fix potential deadlock on socket grab

2015-10-29T21:51:06+00:00

Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce

Clear message structure before decoding into it

2015-10-21T21:00:19+00:00

This resolves a segfault appearing on ARM.

Ticket: https://bugzilla.redhat.com/show_bug.cgi?id=1235902
Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce

Correct handling of EINTR on read()/write()

2015-09-29T01:41:40+00:00

The common send/recv functions where zeroing the ret variable only
once causing a loop if EINTR as actually ever set.

Signed-off-by: Robbie Harwood 
Signed-off-by: Simo Sorce

Fix formatting on noncompliant copyright lines

2015-09-04T20:34:42+00:00

Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce

Suppress warning: use after free

2015-03-29T21:34:42+00:00

gssx_ctx is released in case of error. After the latest changes,
the old ctx is always replaced to new one and output argument is set.

Although it would not be used because return code would not be success
it's safer to set NULL to the pointer and avoid warnings from static analyzers.

src/client/gpm_init_sec_context.c:108:
    alias: Assigning: "ctx" = "res->context_handle".
    Now both point to the same storage.
src/client/gpm_init_sec_context.c:156: freed_arg: "free" frees "ctx".
src/client/gpm_init_sec_context.c:173: use_after_free: Using freed pointer "ctx".

Signed-off-by: Lukas Slebodnik 
Reviewed-by: Simo Sorce

Remove unused parameter from get_pipe_name

2015-03-29T21:32:01+00:00

Signed-off-by: Lukas Slebodnik 
Reviewed-by: Simo Sorce

Properly handle security contexts on error

2015-03-24T15:49:25+00:00

On error we need to make sure we do not return a pointer to a
security context that may have been already freed.
So make sure to always unconditionally return the context that we've
been returned by our callees.
Also reorganize the code so we do not accidently wipe the context
and leak memoy on error.

This fixed a double-free bug found by NFS folks @ Red Hat

Fixes: https://fedorahosted.org/gss-proxy/ticket/137

Signed-off-by: Simo Sorce 
Reviewed-by: Nathaniel McCallum