]> git.ipfire.org Git - thirdparty/krb5.git/commit
projects / thirdparty / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6087423) | patch
Fix GSS krb5 GSS_C_DELEG_FLAG ret_flags result
authorGreg Hudson <ghudson@mit.edu>
Fri, 8 Aug 2014 20:50:38 +0000 (16:50 -0400)
committerGreg Hudson <ghudson@mit.edu>
Sat, 9 Aug 2014 16:31:32 +0000 (12:31 -0400)
commitd899084e24555dc8fd091eb08187ca2a45a08324
tree46a1944e3b3b77e752469552e5b033ecf1bc7632tree
parent6087423239b23667bc74dc39f8f00a8796f09736commit | diff
Fix GSS krb5 GSS_C_DELEG_FLAG ret_flags result

The krb5 gss_accept_sec_context could erroneously return
GSS_C_DELEG_FLAG in ret_flags if either:

* The token included the GSS_C_DELEG_FLAG but did not include at least
  28 bytes in the authenticator checksum.
* The initial token included the GSS_C_DELEG_FLAG but a DCE-style
  exchange was performed.

Fix both of these cases.

ticket: 7987 (new)
target_version: 1.13
tags: pullup
src/lib/gssapi/krb5/accept_sec_context.c diff | blob | blame | history
Mirror of https://github.com/krb5/krb5.git