oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
28,585 Commits 2 Branches 2 Tags
07e3cbb7fb88ef27d6145f4f2b22a1becf7088c5
Commit Graph

39 Commits

Author SHA1 Message Date
Viktor Dukhovni
09c4e516bf Further polish and docs for hierarchical capaths 2016-08-10 21:09:15 -04:00
Viktor Dukhovni
fc4e52174c Silence possible compiler warning 
Reported by David Mulder, PR 195.
 2016-08-09 20:57:04 -04:00
Viktor Dukhovni
99dfbda161 Add missing error check in krb5_check_transited 
Reported by David Mulder, PR 195.
 2016-08-09 20:52:58 -04:00
Viktor Dukhovni
1501740952 Fix transit path validation 
Also implement KDC hierarchical transit policy checks.  The "hier_capaths"
parameter defaults to "yes" in [libdefaults] or can be set explicitly in
[realms] per-realm.
 2016-08-08 16:29:18 -05:00
Viktor Dukhovni
ae2df333cd More complete logging of capths violations 
It is much easier (i.e. actually possible) to debug transit path policy
violations when the logs specify the client and server realms, not just
the transit realm.
 2014-03-15 00:04:20 -04:00
Love Hornquist Astrand
8b1b47035d Switch to krb5_enomem 2011-05-22 20:43:31 -07:00
Love Hornquist Astrand
0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
be92276b8b Fix bug in realm encoding reported by Mark Pröhl 
Also, add basic test while here.
 2011-05-08 11:22:07 -07:00
Love Hornquist Astrand
f5f9014c90 Warning fixes from Christos Zoulas 
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
 2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
687db64c56 Patch from Secure Endpoints/Asanka Herath for windows support 2009-12-21 08:45:28 +01:00
Love Hornquist Astrand
4d200dd2d5 Clean the list in a simpler way 2009-07-30 18:56:23 +02:00
Love Hornquist Astrand
25b0f731ab Better handling of memory allocation failure [CID-77] 2009-07-30 12:27:19 +02:00
Love Hörnquist Åstrand
942a821fab remove RCSID 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand
03babea1e3 switch to krb5_clear_error_message 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23911 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-10-14 02:55:39 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
f6177cb4f2 make compile again 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23808 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-07 21:37:07 +00:00
Love Hörnquist Åstrand
7fcd266fdd use krb5_set_error_message 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23316 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-06-23 04:32:32 +00:00
Love Hörnquist Åstrand
0eac1d3a68 use krb5_set_error_message 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23311 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-06-23 03:30:57 +00:00
Love Hörnquist Åstrand
ed707620c0 Use unsigned where appropriate. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22871 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-04-07 18:50:32 +00:00
Love Hörnquist Åstrand
8d40c2994b check return value of alloc functions, from Charles Longeau 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21745 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-07-31 16:11:25 +00:00
Love Hörnquist Åstrand
2eeae67af7 (make_path): make sure we return allocated memory 
Coverity, NetBSD CID#1892


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17043 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-04-10 10:26:35 +00:00
Love Hörnquist Åstrand
c857bdbb07 (expand_realm): avoid passing NULL to strlen, found by IBM checker. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16945 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-04-02 01:36:45 +00:00
Love Hörnquist Åstrand
e6f9987ade rename the temporary string variable to `str' 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15475 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-06-17 04:53:35 +00:00
Love Hörnquist Åstrand
91351971f7 add KRB5_LIB_FUNCTION to all exported functions 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13863 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-05-25 21:46:46 +00:00
Love Hörnquist Åstrand
731fab1b47 (krb5_domain_x500_encode): always zero out encoding to make sure it 
have a defined value on failure


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13066 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-22 06:04:35 +00:00
Love Hörnquist Åstrand
4cd19e3fe3 (krb5_domain_x500_encode): if num_realms == 0, set encoding and return 
(avoids malloc(0)), check return value for malloc


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13062 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-21 23:06:50 +00:00
Love Hörnquist Åstrand
b446b9833f (krb5_domain_x500_decode): set *num_realms to zero not num_realms 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13033 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-21 10:16:39 +00:00
Johan Danielsson
df034198d5 (krb5_domain_x500_decode): handle zero length tr data; 
(krb5_check_transited): new function that does more useful stuff


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13025 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-20 16:41:27 +00:00
Love Hörnquist Åstrand
6223cf0f22 use strlcat/strlcpy, from openbsd 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12046 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-04-16 16:13:08 +00:00
Jacques A. Vidrine
9849899e7f Validate some counts that may be received from the network: 
Check that they are non-negative, and that they are small enough to
avoid integer overflow when used in memory allocation calculations.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11411 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-09-09 14:03:03 +00:00
Assar Westerlund
d27aa3b62e add some krb5_{set,clear}_error_string 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9937 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-05-14 06:14:52 +00:00
Johan Danielsson
81c1a29c7f krb5_check_transited_realms 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7897 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-02-07 13:30:41 +00:00
Assar Westerlund
4d5623aac7 use memcpy and strlcpy 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7881 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-02-07 03:19:43 +00:00
Johan Danielsson
c5b916ca6f remove advertising clause 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7464 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1999-12-02 17:05:13 +00:00
Johan Danielsson
943cb8e28d (krb5_domain_x500_decode): don't abort 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6037 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1999-04-24 16:43:34 +00:00
Johan Danielsson
aaae186ab9 merge new-crypto branch 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5332 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1999-02-11 21:03:59 +00:00
Johan Danielsson
23c7a6186a string termination 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3458 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1997-09-10 19:16:35 +00:00
Johan Danielsson
8de2c36a85 something that might resemble domain-x500-compress 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3424 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1997-09-08 00:20:09 +00:00