| Commit message (Expand) | Author | Age | Files | Lines |
| * | Check the return value of krb5_timeofday in krb5int_populate_gic_opt. | Greg Hudson | 2009-04-10 | 1 | -1/+7 |
| * | Check return value of krb5int_copy_data_contents in preauth2.c's | Greg Hudson | 2009-04-10 | 1 | -1/+4 |
| * | Using a patch from Apple, add support for GSS_C_DELEG_POLICY_FLAG, | Greg Hudson | 2009-04-08 | 2 | -1/+11 |
| * | mk_safe and mk_priv require the local address to be set in the auth | Greg Hudson | 2009-04-08 | 5 | -54/+60 |
| * | When getting initial credentials with a password, try the master if | Greg Hudson | 2009-04-08 | 1 | -2/+1 |
| * | CVE-2009-0846 asn1_decode_generaltime can free uninitialized pointer | Tom Yu | 2009-04-07 | 1 | -0/+1 |
| * | CVE-2009-0847 asn1buf_imbed incorrect length validation | Tom Yu | 2009-04-07 | 1 | -2/+4 |
| * | CVE-2009-0844 SPNEGO can read beyond buffer end | Tom Yu | 2009-04-07 | 1 | -27/+24 |
| * | Apply revised patch from Apple that ensures that a REJECT token is | Tom Yu | 2009-04-07 | 1 | -3/+5 |
| * | fix logic errors | Sam Hartman | 2009-04-04 | 1 | -1/+1 |
| * | Adjust the logic in rule_an_to_ln to avoid a "can't happen" case of | Greg Hudson | 2009-04-03 | 1 | -5/+7 |
| * | Merge fast branch at 22166 onto trunk | Sam Hartman | 2009-04-03 | 12 | -40/+162 |
| * | Unfortunately, pre-1.7 krshd fails to support keyed checksums because | Sam Hartman | 2009-04-03 | 2 | -1/+3 |
| * | Use the preferred checksum for non-DES keys in the kdc_req path and | Sam Hartman | 2009-04-01 | 2 | -3/+20 |
| * | Make FAST changes build when pkinit is disabled | Tom Yu | 2009-03-31 | 4 | -19/+23 |
| * | mark export grade RC4 as weak | Sam Hartman | 2009-03-31 | 1 | -1/+2 |
| * | make depend | Sam Hartman | 2009-03-31 | 1 | -2/+13 |
| * | Implement FAST from draft-ietf-krb-wg-preauth-framework | Sam Hartman | 2009-03-31 | 15 | -21/+1013 |
| * | in send_tgs.c: | Sam Hartman | 2009-03-31 | 1 | -1/+1 |
| * | Add PAC and principal parsing test cases | Greg Hudson | 2009-03-30 | 4 | -2/+756 |
| * | Install kadmin and kdb headers | Greg Hudson | 2009-03-20 | 2 | -0/+16 |
| * | Fix error handling issue in ASN.1 decoder | Greg Hudson | 2009-03-17 | 1 | -1/+2 |
| * | make depend | Sam Hartman | 2009-03-16 | 1 | -0/+12 |
| * | Implement tests for authdata functions | Sam Hartman | 2009-03-16 | 2 | -2/+109 |
| * | Implement krb5int_find_authdata | Sam Hartman | 2009-03-16 | 1 | -0/+89 |
| * | Implement test cases for CF2 | Sam Hartman | 2009-03-16 | 8 | -2/+147 |
| * | Implement KRB-FX_CF2 | Sam Hartman | 2009-03-16 | 4 | -0/+172 |
| * | krb5_auth_con_free should support freeing a null auth_context without segfault | Sam Hartman | 2009-03-16 | 1 | -0/+2 |
| * | CVE-2009-0845 SPNEGO can dereference a null pointer | Tom Yu | 2009-03-13 | 1 | -1/+2 |
| * | Use correct salt for canonicalized principals | Greg Hudson | 2009-03-13 | 1 | -1/+23 |
| * | Better fix: Delay setting 'outbuf' until after the header buffer might | Ken Raeburn | 2009-03-12 | 1 | -3/+2 |
| * | crash using library-allocated storage for header in wrap_iov | Ken Raeburn | 2009-03-12 | 1 | -2/+3 |
| * | Make a working krb5_copy_error_message | Greg Hudson | 2009-03-11 | 2 | -0/+15 |
| * | Several small fixes to enable the migrate mkey commands to work properly with... | Will Fiveash | 2009-03-10 | 1 | -1/+1 |
| * | Rename kdb_setup_lib_handle to krb5_db_setup_lib_handle and export it. | Greg Hudson | 2009-03-10 | 2 | -40/+41 |
| * | send_as_req re-encodes the request | Sam Hartman | 2009-03-06 | 1 | -19/+12 |
| * | Take out of the loop unchangeble assignments. Tabulation | Zhanna Tsitkov | 2009-03-05 | 1 | -27/+26 |
| * | krb5_merge_authdata should initialize output on failure | Sam Hartman | 2009-02-26 | 1 | -0/+1 |
| * | Include authenticator and ticket authdata in gss-api | Sam Hartman | 2009-02-26 | 3 | -13/+38 |
| * | Check return code of encode_krb5_ap_req. Also, tabs vs whitespace | Zhanna Tsitkov | 2009-02-23 | 1 | -134/+135 |
| * | In krb5int_generate_and_save_subkey, check the return value of | Greg Hudson | 2009-02-23 | 1 | -4/+5 |
| * | Check the return value of fseek in two places in kt_file.c | Greg Hudson | 2009-02-23 | 1 | -2/+8 |
| * | Kill an odd (but harmless) use of strncpy in | Greg Hudson | 2009-02-23 | 1 | -7/+4 |
| * | send_tgs.c: | Sam Hartman | 2009-02-23 | 1 | -30/+33 |
| * | Some fixups and stubs for building ccapi on UNIX, and dependencies. | Ken Raeburn | 2009-02-18 | 4 | -4/+27 |
| * | Revert the fopen part of the previous krb5_kuserok change, but keep | Greg Hudson | 2009-02-17 | 1 | -5/+4 |
| * | In krb5_kuserok, just try opening .k5login; don't check ahead of time | Greg Hudson | 2009-02-17 | 1 | -9/+11 |
| * | Correct numerous memory leaks on error conditions in the ASN.1 | Greg Hudson | 2009-02-13 | 3 | -299/+1030 |
| * | In tgs_construct_tgsreq, free scratch even if scratch->data is NULL. | Greg Hudson | 2009-02-13 | 1 | -2/+2 |
| * | Implement TGS authenticator subkey usage | Sam Hartman | 2009-02-13 | 4 | -35/+52 |