a0dcf9bffd
if a CSR has multiple extRequests, keep only last
...
The code already keeps the last entry, but it leaks the previous copies. @nicowilliams noticed this.
2026-01-19 00:18:47 -06:00
76db37d833
sanon: Do not acquire creds for GSS_C_NO_NAME
2026-01-18 23:47:40 -06:00
d233bf84d7
Use <poll.h> insted of <sys/poll.h>
...
Acording to POSIX <poll.h> should be used instead of <sys/poll.h>.
Libcs like musl libc added a redict due maintain compat with older
glibcs and added the following warning:
/usr/include/sys/poll.h:1:2: warning: #warning redirecting incorrect #include <sys/poll.h> to <poll.h> [-Wcpp]
1 | #warning redirecting incorrect #include <sys/poll.h> to <poll.h>
| ^~~~~~~
Ref: https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/poll.h.html
2026-01-18 23:27:57 -06:00
bbfc116686
gsskrb5: display_name(NO_NAME) should not crash ( fix #1288 )
2026-01-18 20:48:42 -06:00
5580b3fe91
Add SPDX-License-Identifier for Secure Endpoints Inc
2026-01-18 20:06:06 -06:00
0fcc1d4225
Add SPDX-License-Identifier for Apple, Inc
2026-01-18 20:06:06 -06:00
0e9e2a13e0
Add SPDX-License-Identifier for The NetBSD Foundation, Inc.
2026-01-18 20:06:06 -06:00
9536b1d116
Add SPDX-License-Identifier for PADL Software Pty Ltd
2026-01-18 20:06:06 -06:00
eab82e40ad
Add SPDX-License-Identifier for Doug Rabson
2026-01-18 20:06:06 -06:00
8a03cda949
Add SPDX-License-Identifier for The Regents of the University of California.
2026-01-18 20:06:06 -06:00
37d5df6078
Add SPDX-License-Identifier for The Regents of the University of California
2026-01-18 20:06:06 -06:00
1151d88402
Add SPDX-License-Identifier for Massachusetts Institute of Technology
2026-01-18 20:06:06 -06:00
d3e6c52baf
Add SPDX-License-Identifier for Kungliga Tekniska Högskolan
2026-01-18 20:06:06 -06:00
3be4426f9d
Update NEWS release notes for upcoming 8.0 release
2026-01-18 19:06:17 -06:00
fa43b2d3c4
asn1: Fix UB in two tests
2026-01-18 19:06:17 -06:00
a1dfcc8453
krb5: Constify krb5_kuserok()
2026-01-18 19:06:17 -06:00
10732be94c
gss: Constify gss_str_to_oid()
2026-01-18 19:06:17 -06:00
d67e0b6d39
cf: clang -Wimplicit-fallthrough for flex code
2026-01-18 19:06:17 -06:00
75affc8f55
cf: clang pretends to be GCC 4
2026-01-18 19:06:17 -06:00
09b77c4051
cf: Work around differents in Wflags b. gcc and clang
2026-01-18 19:06:17 -06:00
bc11abde3b
cf/roken-frag.m4: Add a bunch more warnings.
...
Note: the rk_WFLAGS in configure.ac appears to be dead code,
overridden by the rk_WFLAGS in cf/roken-frag.m4. This confusing
state of affairs should be improved.
2026-01-18 19:06:17 -06:00
5589cf96c7
Sprinkle const and rk_UNCONST throughout the tests.
2026-01-18 19:06:17 -06:00
814f03ad7f
kdc_test_plugin: rk_UNCONST for krb5_pac_add_buffer.
2026-01-18 19:06:17 -06:00
e293353c4d
appl/test: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
ac3f9212da
appl/kf: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
9460245c1f
gssmask: Sprinkle rk_UNCONST for read-only krb5_data.
2026-01-18 19:06:17 -06:00
40317659b0
kinit: rk_UNCONST for read-only krb5_data.
2026-01-18 19:06:17 -06:00
97f8bb1a28
kcm: Sprinkle const.
2026-01-18 19:06:17 -06:00
adeae8336c
kdc: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
29a791f8f4
kdc: rk_UNCONST for literal shell.version.
...
I assume this is used read-only by ASN1_MALLOC_ENCODE.
2026-01-18 19:06:17 -06:00
56a6e7261b
kadm5: Sprinkle const and rk_UNCONST for private string not modified.
2026-01-18 19:06:17 -06:00
5373ab492f
ipc: rk_UNCONST for private string not modified.
2026-01-18 19:06:17 -06:00
a9f37d2597
libroken: Make roken_detach_prep take const char *special_arg.
...
Requires an internal rk_UNCONST because of annoying execvp type, but
that's better than rk_UNCONST in all the call sites.
2026-01-18 19:06:17 -06:00
5fec8989b5
gssapi: Sprinkle const and rk_UNCONST to pacify -Wwrite-strings.
...
All for read-only krb5_data or gss_buffer_desc.
2026-01-18 19:06:17 -06:00
9c1b2e963b
krb5: Sprinkle const and rk_UNCONST to pacify -Wwrite-strings.
...
Mostly for read-only iov or krb5_data.
2026-01-18 19:06:17 -06:00
f08f1a6456
appl/kf: Label unconst for read-only krb5_data.
2026-01-18 19:06:17 -06:00
294ab3ae5d
kdc: Sprinkle rk_UNCONST.
2026-01-18 19:06:17 -06:00
3c2b7b865b
kdc: Note strict aliasing violations.
2026-01-18 19:06:17 -06:00
29da785a64
kadm5: Note strict aliasing violation.
2026-01-18 19:06:17 -06:00
0eb423022f
hdb: Label unconst abuse for read-only krb5_data.
2026-01-18 19:06:17 -06:00
82225829a0
gss_preauth: Label unconst abuse with rk_UNCONST.
2026-01-18 19:06:17 -06:00
cdd1fb8fc4
gssapi/sanon: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
bbf6150cfd
gssapi: Make gss_duplicate_oid{,_set} take gss_const_OID_t.
2026-01-18 19:06:17 -06:00
04dcda3628
gssapi/spnego: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
137939e0d2
gssapi: Make gss_add_buffer_set_member take gss_const_buffer_t.
...
`const gss_buffer_t' was probably meant to be gss_const_buffer_t.
XXX This changes the type of a public symbol -- does thiat require a
version bump?
2026-01-18 19:06:17 -06:00
34dc2dda57
gssapi/mech: Sprinkle const and rk_UNCONST.
2026-01-18 19:06:17 -06:00
80545251a0
gssapi/krb5: Sprinkle some const, but mostly label unconst abuse.
2026-01-18 19:06:17 -06:00
d17fed0c7f
krb5/log: Note strict aliasing violation.
2026-01-18 19:06:17 -06:00
c199e31fcd
krb5/init_creds_pw.c: Label unconst abuse.
...
API is just not type-safe here, bummer.
2026-01-18 19:06:17 -06:00
18dcaf1ca7
krb5/get_cred: Sprinkle const and label & comment unconst abuse.
2026-01-18 19:06:17 -06:00
Michael Richardson