oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

gss: initialize mech output parameters in mechglue

Browse Source 
Initialize mechanism output parameters before calling mechanism
GSS_Accept_sec_context(), to behave robustly with poorly implemented mechanisms
that may return before initializing them.
This commit is contained in:
Luke Howard
2020-03-02 17:10:11 +11:00
parent 41cb135b30
commit e8de24f236
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/gssapi/mech/gss_accept_sec_context.c
View File

@@ -161,9 +161,9 @@ gss_accept_sec_context(OM_uint32 *minor_status,
struct _gss_cred *cred = (struct _gss_cred *) acceptor_cred_handle;
struct _gss_mechanism_cred *mc;
gss_const_cred_id_t acceptor_mc;
gss_cred_id_t delegated_mc;
gss_name_t src_mn;
gss_OID mech_ret_type = NULL;
gss_cred_id_t delegated_mc = GSS_C_NO_CREDENTIAL;
gss_name_t src_mn = GSS_C_NO_NAME;
gss_OID mech_ret_type = GSS_C_NO_OID;
*minor_status = 0;
if (src_name)
@@ -229,7 +229,6 @@ gss_accept_sec_context(OM_uint32 *minor_status,
} else {
acceptor_mc = GSS_C_NO_CREDENTIAL;
}
delegated_mc = GSS_C_NO_CREDENTIAL;
mech_ret_flags = 0;
major_status = m->gm_accept_sec_context(minor_status,