]> git.ipfire.org Git - thirdparty/krb5.git/commit
Do proper length decoding in SPNEGO gss_get_oid()
authorGreg Hudson <ghudson@mit.edu>
Tue, 28 Jul 2020 16:51:06 +0000 (12:51 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 9 Sep 2020 20:30:18 +0000 (16:30 -0400)
commitf712fa5a94438096d3c2449babe4aca9c17d7feb
treee0736ae3a953204d61b331eed01bc47bc460cdfd
parentc770dfd7e2e5ca91fc1c450f60c2f546c0c2bd61
Do proper length decoding in SPNEGO gss_get_oid()

When reading an OID in a SPNEGO token, use gssint_get_der_length()
rather than assuming the length fits in one byte.  Although OID
lengths greater than 127 are unlikely, some NetApp products have been
observed to incorrectly encode the length in multiple bytes.  Reported
by Richard Sharpe.

ticket: 8932 (new)
src/lib/gssapi/spnego/spnego_mech.c