]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix SPNEGO context import
authorGreg Hudson <ghudson@mit.edu>
Mon, 2 Nov 2015 03:46:56 +0000 (22:46 -0500)
committerTom Yu <tlyu@mit.edu>
Thu, 5 Nov 2015 20:18:36 +0000 (15:18 -0500)
commit8e10a780fd3bfefd1ba08ca1552e8d0677917454
tree885edffb5d60a243dbf876d55d9f8bef894edcc8
parent54222de30a89bfac0247dfbc1759556dc9fd2983
Fix SPNEGO context import

The patches for CVE-2015-2695 did not implement a SPNEGO
gss_import_sec_context() function, under the erroneous belief that an
exported SPNEGO context would be tagged with the underlying context
mechanism.  Implement it now to allow SPNEGO contexts to be
successfully exported and imported after establishment.

(cherry picked from commit 222b09f6e2f536354555f2a0dedfe29fc10c01d6)

ticket: 8273
version_fixed: 1.14
src/lib/gssapi/spnego/spnego_mech.c