krb5.git/src/lib/gssapi/generic, branch proxymech MIT Kerberos patches Add missing .gitignore entries and clean rules 2013-02-27T21:33:50+00:00 Greg Hudson ghudson@mit.edu 2013-02-27T21:33:28+00:00 f09c97320e683a2ad0e42df63aeedd16b78c9ad2 ticket: 7585 
ticket: 7585
Modernize k5buf 2013-02-14T16:42:28+00:00 Greg Hudson ghudson@mit.edu 2013-02-14T16:41:10+00:00 6dda284554a869f7fa1e6d2a035df06c97f103ef Rename the krb5int_buf_ family of functions to use the k5_ prefix for brevity. Reformat some k5buf implementation code to match current practices. 
Rename the krb5int_buf_ family of functions to use the k5_ prefix for
brevity.  Reformat some k5buf implementation code to match current
practices.
Fix RFC 5587 const pointer typedefs 2013-02-12T02:13:15+00:00 Greg Hudson ghudson@mit.edu 2013-02-12T02:13:15+00:00 884e040c0478c94585395a03dfbb0bbdee7c5ed4 gss_const_ctx_id_t, gss_const_cred_id_t, and gss_const_name_t are supposed to be const pointers to the appropriate structures, not the structures themselves. These are not used by any prototypes yet, and no application would have any reason to use them as they are, so it should be safe to change them within the public header. ticket: 7567 (new) target_version: 1.11.1 tags: pullup 
gss_const_ctx_id_t, gss_const_cred_id_t, and gss_const_name_t are
supposed to be const pointers to the appropriate structures, not the
structures themselves.  These are not used by any prototypes yet, and
no application would have any reason to use them as they are, so it
should be safe to change them within the public header.

ticket: 7567 (new)
target_version: 1.11.1
tags: pullup
make depend 2013-01-10T17:46:26+00:00 Greg Hudson ghudson@mit.edu 2013-01-10T17:46:26+00:00 2807e8e1e1dc89b3d482de7c73d13d19187fdb38 Mostly this gets rid of the trailing space on line 2 after bb76891f5386526bdf91bc790c614fc9296cb5fa. 
Mostly this gets rid of the trailing space on line 2 after
bb76891f5386526bdf91bc790c614fc9296cb5fa.
Fix void pointer arithmetic in oid_ops.c 2013-01-09T15:08:21+00:00 Greg Hudson ghudson@mit.edu 2013-01-09T15:07:27+00:00 fc20ae13f18260930433d6239554f24bb50312a3 When asserting that out has advanced the expected number of bytes in generic_gss_str_to_oid, avoid adding to oid->elements, which is a void pointer. Instead subtract from out and compare. ticket: 7524 
When asserting that out has advanced the expected number of bytes in
generic_gss_str_to_oid, avoid adding to oid->elements, which is a void
pointer.  Instead subtract from out and compare.

ticket: 7524
Fix gss_str_to_oid and gss_oid_to_str edge cases 2013-01-01T22:41:49+00:00 Greg Hudson ghudson@mit.edu 2013-01-01T05:23:43+00:00 9b702abe222d4b279d5869f96f09074452478b1e Neither function correctly handled OIDs whose second arc exceeds 47 (theoretically possible if the first arc is 2). gss_str_to_oid had additional problems: it used scanf, it didn't consistently protect against read overrun if the input buffer wasn't null-terminated, and it could get confused by + or - characters in the first two arcs. Fix gss_oid_to_str and rewrite gss_str_to_oid. Also add a test program. ticket: 7524 (new) 
Neither function correctly handled OIDs whose second arc exceeds 47
(theoretically possible if the first arc is 2).  gss_str_to_oid had
additional problems: it used scanf, it didn't consistently protect
against read overrun if the input buffer wasn't null-terminated, and
it could get confused by + or - characters in the first two arcs.  Fix
gss_oid_to_str and rewrite gss_str_to_oid.

Also add a test program.

ticket: 7524 (new)
Fix a small memory leak in util_errmap 2013-01-01T22:41:49+00:00 Greg Hudson ghudson@mit.edu 2012-12-31T22:21:46+00:00 379d39c17b8930718e98185a5b32a0f7f3e3b4b6 Calls to gssint_mecherrmap_map_errcode would result in calling mecherror_copy with a zero-length mech OID, which would result in an OID with 0 for length and malloc(0) for elements. On platforms which return non-null from malloc(0), gssint_mecherrmap_destroy() wouldn't free the elements pointer. Avoid calling malloc(0) and don't use the length field to decide whether to free an elements pointer. 
Calls to gssint_mecherrmap_map_errcode would result in calling
mecherror_copy with a zero-length mech OID, which would result in an
OID with 0 for length and malloc(0) for elements.  On platforms which
return non-null from malloc(0), gssint_mecherrmap_destroy() wouldn't
free the elements pointer.

Avoid calling malloc(0) and don't use the length field to decide
whether to free an elements pointer.
Fix gss_str_to_oid for OIDs with zero-valued arcs 2013-01-01T22:41:49+00:00 Luke Howard lukeh@padl.com 2012-12-30T15:36:25+00:00 54fa4433df7412267375240aba40959e97ac4fe2 gss_str_to_oid wasn't outputting any bytes for a zero-valued arc. It should output one byte with value 0. [ghudson@mit.edu: commit message] ticket: 7523 (new) target_version: 1.11.1 tags: pullup 
gss_str_to_oid wasn't outputting any bytes for a zero-valued arc.  It
should output one byte with value 0.

[ghudson@mit.edu: commit message]

ticket: 7523 (new)
target_version: 1.11.1
tags: pullup
Introduce gss_export_cred and gss_import_cred 2012-09-11T05:15:43+00:00 Greg Hudson ghudson@mit.edu 2012-08-19T03:40:29+00:00 abc6b8ce993c4c8393228ab5a01f26e7c5b251b2 Add gss_export_cred and gss_import_cred mechglue functions to serialize and unserialize GSSAPI credential handles. Mechanism implementations and tests will follow. ticket: 7354 (new) 
Add gss_export_cred and gss_import_cred mechglue functions to
serialize and unserialize GSSAPI credential handles.  Mechanism
implementations and tests will follow.

ticket: 7354 (new)
Add support for GSS_C_NT_COMPOSITE_EXPORT 2012-08-31T16:03:49+00:00 Luke Howard lukeh@padl.com 2012-08-28T23:47:24+00:00 8626fe9fb6cb14e92b84a68fca5209d0ee656f74 ticket: 7347 (new) 
ticket: 7347 (new)