]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix PKINIT two-component matching rule parsing 611/head
authorGreg Hudson <ghudson@mit.edu>
Fri, 24 Feb 2017 18:41:53 +0000 (13:41 -0500)
committerGreg Hudson <ghudson@mit.edu>
Mon, 27 Feb 2017 17:16:38 +0000 (12:16 -0500)
commit67ae7bbe1ea7032d1cb79682be3a14e7e13ec64f
tree5a5ed748c2ba428ad69a473f7a9b46bcf9a296c4
parent748beda1e36d76bed8b06b272ecb72988eede94b
Fix PKINIT two-component matching rule parsing

In pkinit_matching.c:parse_rule_set(), apply the default relation when
parsing the second component of a rule, not the third.  Otherwise we
apply no default relation to two-component matching rules, effectively
reducing such rules to their second components.  Reported by Sumit
Bose.

ticket: 8553 (new)
target_version: 1.15-next
target_version: 1.14-next
tags: pullup
src/plugins/preauth/pkinit/pkinit_matching.c