<feed xmlns='http://www.w3.org/2005/Atom'>
<title>gss-proxy.git/proxy/src, branch delegate</title>
<subtitle>Work on gss-proxy before it lands upstream</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/'/>
<entry>
<title>wip</title>
<updated>2015-03-22T21:01:52+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2015-03-22T20:52:02+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=ea3b234e7dc56b185e1e25f6041d091e0aaef1c4'/>
<id>ea3b234e7dc56b185e1e25f6041d091e0aaef1c4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Suppress exported_composite_name for the kernel</title>
<updated>2015-03-21T18:31:31+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2015-03-21T18:00:17+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=e623fb514e28081534d5b0de9817ae1b1b865930'/>
<id>e623fb514e28081534d5b0de9817ae1b1b865930</id>
<content type='text'>
The kernel makes no use of this data, and ita causes allocation issues
in some cases with waste of space on the kernel side.

Fixes: https://fedorahosted.org/gss-proxy/ticket/129
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The kernel makes no use of this data, and ita causes allocation issues
in some cases with waste of space on the kernel side.

Fixes: https://fedorahosted.org/gss-proxy/ticket/129
</pre>
</div>
</content>
</entry>
<entry>
<title>Properly handle security contexts on error</title>
<updated>2015-03-21T18:31:04+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2015-02-26T20:49:59+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=5d5d6cb98a42a09d02b8427bfc70ba1e9505eb50'/>
<id>5d5d6cb98a42a09d02b8427bfc70ba1e9505eb50</id>
<content type='text'>
On error we need to make sure we do not return a pointer to a
security context that may have been already freed.
So make sure to always unconditionally return the context that we've
been returned by our callees.
Also reorganize the code so we do not accidently wipe the context
and leak memoy on error.

This fixed a double-free bug found by NFS folks @ Red Hat

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
On error we need to make sure we do not return a pointer to a
security context that may have been already freed.
So make sure to always unconditionally return the context that we've
been returned by our callees.
Also reorganize the code so we do not accidently wipe the context
and leak memoy on error.

This fixed a double-free bug found by NFS folks @ Red Hat

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix error in compiling without SELinux</title>
<updated>2015-03-21T18:25:59+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2015-01-07T20:59:53+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=c3c370a7e95987ec55b3441e6ff5fcd218ff5bb0'/>
<id>c3c370a7e95987ec55b3441e6ff5fcd218ff5bb0</id>
<content type='text'>
Fixes: #131

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes: #131

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix cast error</title>
<updated>2015-03-21T18:25:26+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-15T16:38:56+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=6555dbe148c4f682fe939f329b1a7fcb805ee339'/>
<id>6555dbe148c4f682fe939f329b1a7fcb805ee339</id>
<content type='text'>
An unsigned int cannot be cast to a size_t. On some architectures (like s390)
they have different sizes resulting in both writing out of bounds and getting
just a zero in the length field and causing the next operation to fail.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
An unsigned int cannot be cast to a size_t. On some architectures (like s390)
they have different sizes resulting in both writing out of bounds and getting
just a zero in the length field and causing the next operation to fail.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Log why acquiring credentials failed.</title>
<updated>2015-03-21T18:12:42+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T17:15:03+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=5a00bbdc2eb4e48c6a98c55dc9d8dfc2131b6623'/>
<id>5a00bbdc2eb4e48c6a98c55dc9d8dfc2131b6623</id>
<content type='text'>
This will help understanding why gss-proxy interposed programs are
failing.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This will help understanding why gss-proxy interposed programs are
failing.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Generalize GSS Display Status logger code</title>
<updated>2015-03-21T18:12:42+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T17:05:06+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=13afa2608e1e7d8e757295dda35fa1def1be663f'/>
<id>13afa2608e1e7d8e757295dda35fa1def1be663f</id>
<content type='text'>
This way it can be used both in stderr debugging as well as for sending
errors to syslog.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This way it can be used both in stderr debugging as well as for sending
errors to syslog.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Zero out the outputs of display_name</title>
<updated>2015-01-22T19:54:05+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2015-01-22T19:26:23+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=9da1bc9dec8d228b35ef8639832cddc5e477ddf8'/>
<id>9da1bc9dec8d228b35ef8639832cddc5e477ddf8</id>
<content type='text'>
The mechglue expects the mechanism function to zero them in all cases.
Otherwise on error it will later try to free the output buffer value
which can be an arbitrary pointer. This will cause a segfault or
worse in glibc's free().

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Roland Mainz &lt;rmainz@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The mechglue expects the mechanism function to zero them in all cases.
Otherwise on error it will later try to free the output buffer value
which can be an arbitrary pointer. This will cause a segfault or
worse in glibc's free().

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Roland Mainz &lt;rmainz@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix memory leak</title>
<updated>2015-01-15T18:36:42+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2014-11-15T21:33:34+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=5a99c4873bd79adf8359370869469f745eec8c35'/>
<id>5a99c4873bd79adf8359370869469f745eec8c35</id>
<content type='text'>
Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Use defined enum instead of constant</title>
<updated>2015-01-15T18:35:28+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2014-11-15T17:34:55+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=09a2c4ac42afdedbcdec3c4b2a430a892cc5aab4'/>
<id>09a2c4ac42afdedbcdec3c4b2a430a892cc5aab4</id>
<content type='text'>
Value of enum gp_rpc_accept_status GP_RPC_SUCCESS is 0
Value of enum gp_rpc_reject_status GP_RPC_RPC_MISMATCH is 0

Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Value of enum gp_rpc_accept_status GP_RPC_SUCCESS is 0
Value of enum gp_rpc_reject_status GP_RPC_RPC_MISMATCH is 0

Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
</feed>
