Commit Graph

  • bc3d9c0115 asn1: JSON output open type IDs Luke Howard 2022-11-13 10:11:40 +11:00
  • 6a3604caf1 asn1: fix incorrect tag value for UT_UniversalString Luke Howard 2022-11-13 10:11:05 +11:00
  • c132e6ff49 lib/base: Avoid compiler warning about use-after-free on Fedora 36 Andrew Bartlett 2022-10-27 13:21:31 +13:00
  • 2c8be80a25 lib/base: Correct realloc() paramters, to allocate one more byte, not 1 byte Andrew Bartlett 2022-10-28 15:04:09 +13:00
  • 7b75136113 lib/krb5: add TGS-REQ PA-DATA e.g. FOR_USER also to the outer req Stefan Metzmacher 2022-03-07 23:28:12 +01:00
  • 422419ddde kdc: add missing enctype = p[i] assignments to _kdc_find_etype() Stefan Metzmacher 2022-01-27 17:42:28 +01:00
  • 05e589d247 kdc: Check generate_pac() return code Joseph Sutton 2022-06-16 15:26:07 +12:00
  • f4faaeaba3 heimdal: Fix the 32-bit build on FreeBSD Volker Lendecke 2022-07-22 18:38:21 +02:00
  • 603e673130 Windows: link against LIBHEIMBASE for json functionality Jeffrey Altman 2022-11-16 22:04:06 -05:00
  • 5e48ec6c88 lib/krb5: Remove __func__ compatibility workaround Joseph Sutton 2022-11-16 21:11:51 -05:00
  • 36cf07bc44 Windows: define __func__ in terms of __FUNCTION__ Jeffrey Altman 2022-11-16 21:09:52 -05:00
  • a9fca332da lib/asn1: free_type fix HEIM_FALLTHROUGH usage Jeffrey Altman 2022-11-16 11:18:36 -05:00
  • 9d1bfab988 lib/krb5: fix _krb5_get_int64 on 32-bit systems Stefan Metzmacher 2022-11-16 10:05:56 -05:00
  • efeab17c03 Update NEWS Nicolas Williams 2021-12-08 23:13:33 -06:00
  • 9c9dac2b16 asn1: CVE-2022-44640 invalid free in ASN.1 codec Nicolas Williams 2021-03-10 16:49:04 -06:00
  • 2a4210b7e9 gsskrb5: CVE-2022-3437 Pass correct length to _gssapi_verify_pad() Joseph Sutton 2022-10-12 13:57:33 +13:00
  • 22749e918f gsskrb5: CVE-2022-3437 Check for overflow in _gsskrb5_get_mech() Joseph Sutton 2022-10-10 20:33:09 +13:00
  • 6a48779651 gsskrb5: CVE-2022-3437 Check buffer length against overflow for DES{,3} unwrap Joseph Sutton 2022-08-15 16:54:23 +12:00
  • 4aca82c7d0 gsskrb5: CVE-2022-3437 Check the result of _gsskrb5_get_mech() Joseph Sutton 2022-08-15 16:53:55 +12:00
  • ce6d8bbdbb gsskrb5: CVE-2022-3437 Avoid undefined behaviour in _gssapi_verify_pad() Joseph Sutton 2022-08-15 16:53:45 +12:00
  • cc9af5194a gsskrb5: CVE-2022-3437 Don't pass NULL pointers to memcpy() in DES unwrap Joseph Sutton 2022-10-12 13:57:42 +13:00
  • e407e0ead6 gsskrb5: CVE-2022-3437 Use constant-time memcmp() in unwrap_des3() Joseph Sutton 2022-10-12 13:57:55 +13:00
  • e18b8f111f gsskrb5: CVE-2022-3437 Use constant-time memcmp() for arcfour unwrap Joseph Sutton 2022-10-12 13:57:13 +13:00
  • b90b219ab8 krb5: CVE-2022-42898 PAC parse integer overflows Joseph Sutton 2022-10-14 16:45:37 +13:00
  • f727a4bdfd bx509: Fix test moar Nicolas Williams 2022-11-01 17:57:03 -05:00
  • e50abd5aa0 cf: Disable broken-getaddrinfo test (fixes check-iprop on OS X) Nicolas Williams 2022-10-26 22:45:55 -05:00
  • 944c71020e cf: Disable BROKEN_REALLOC workaround Nicolas Williams 2022-10-25 21:51:01 -05:00
  • 00b065bc80 cf: Do not redefine realloc() when ASAN is used Nicolas Williams 2022-10-25 21:44:07 -05:00
  • 0f919e89ca base: -Wno-string-concatenation for test_base Nicolas Williams 2022-10-25 20:11:36 -05:00
  • 3a5e91eca2 hcrypto: Remove MD2 with prejudice Nicolas Williams 2022-10-25 22:20:45 -05:00
  • bad07f7738 gss: Fix UB Nicolas Williams 2022-10-26 01:53:47 -05:00
  • 8e9ad6eda2 krb5: Fix UB Nicolas Williams 2022-10-26 01:54:13 -05:00
  • 5b1c69b424 hcrypto: Fix UB Nicolas Williams 2022-10-26 01:54:02 -05:00
  • e4311f3a82 asn1: Fix UB and incorrect codec for unconstrained INTEGER values of -1 Nicolas Williams 2022-10-26 01:53:10 -05:00
  • 476d216f89 base: Fix UB Nicolas Williams 2022-10-25 23:24:43 -05:00
  • 07abfdb1a9 roken: Fix UB Nicolas Williams 2022-10-26 01:54:19 -05:00
  • 3e1befe633 bx509: Make test run with UBSAN Nicolas Williams 2022-11-01 16:08:48 -05:00
  • c87192e700 GHA: Make UBSAN build run Nicolas Williams 2022-11-01 10:23:47 -05:00
  • 553abd456f GHA: Add UBSAN build Nicolas Williams 2022-11-01 10:00:46 -05:00
  • ed40630174 sl: Fix exit(0) when incorrect usage Nicolas Williams 2022-10-11 21:03:14 -05:00
  • ea4b822af7 gss: Fix gss-token success exit code Nicolas Williams 2022-10-06 16:41:35 -05:00
  • 5ce580f5ad roken: Fix typo in lib/roken/Makefile.am Nicolas Williams 2022-10-06 16:42:05 -05:00
  • c015db46da windows: Do not make test in kadmin/ Nicolas Williams 2022-10-02 19:07:09 -05:00
  • ceec364ed4 ktutil: Add import command and other improvements Nicolas Williams 2022-10-01 17:57:54 -05:00
  • 69dc89b39a ktutil: Add list --json option Nicolas Williams 2022-10-01 11:53:23 -05:00
  • 6297b76362 klist: Real JSON output Nicolas Williams 2022-09-30 22:05:41 -05:00
  • f90f055659 iprop: Enable secondary KDC bootstrapping w/ PKINIT Nicolas Williams 2022-09-30 17:06:52 -05:00
  • 56c6120522 httpkadmind: Make more like bx509d internally Nicolas Williams 2022-08-22 22:38:03 -05:00
  • ae527bf97c bx509d: Add /get-tgts batch end-point Nicolas Williams 2022-08-10 18:08:03 -05:00
  • 323f4631a4 krb5: Do not clobber keytab entry timestamps Nicolas Williams 2022-10-01 17:49:39 -05:00
  • 1429814eda base: HEIM_JSON_F_TRY_DECODE_DATA cannot work Nicolas Williams 2022-10-01 17:53:11 -05:00
  • ed4b50720d base: Export type ID enum Nicolas Williams 2022-10-01 17:52:17 -05:00
  • 8364bdd8f3 base: Add JSON string non-ASCII escaping options Nicolas Williams 2022-10-02 22:43:20 -05:00
  • 03f06b9472 base: Prettier JSON output / options Nicolas Williams 2022-10-01 00:12:09 -05:00
  • c6a46f0c96 base: Implement JSON string escaping Nicolas Williams 2022-09-11 00:28:00 -05:00
  • 7ae4292986 lib/krb5: Fix leak in error path Joseph Sutton 2022-09-24 11:03:46 +12:00
  • c4216b17a8 kdc: add enable_fast option (enabled by default) Stefan Metzmacher 2022-03-08 16:11:39 +01:00
  • 348a03e48e Documentation changes for the Windows Build Rod Widdowson 2022-04-03 11:43:43 +01:00
  • cd3b6e5a41 hdb: fix ldap module build (missing 'is_file_based' and 'can_taste' initializers) Sergei Trofimovich 2022-07-01 07:56:53 +01:00
  • 8b0c7ec09a krb5: remove krb5-v4compat.h Jeffrey Altman 2022-09-22 20:54:34 -04:00
  • 97eaa6cd01 krb5: pkinit select_dh_group clarify 'bits' param is the minimum Jeffrey Altman 2022-09-16 17:00:20 -04:00
  • 1e67fd6c01 krb5: rfc3526-MODP-group14 incorrect bit size Jeffrey Altman 2022-09-16 16:31:39 -04:00
  • e7efa7783a gssapi: add dependency on gkrb5_err.h Sergei Trofimovich 2022-07-01 09:00:46 +01:00
  • 254e40294e doc: add dependency on vars.texi Sergei Trofimovich 2022-07-01 08:46:53 +01:00
  • eb8da07a7b hdb: add missing build dependency on "hdb-protos.h" Sergei Trofimovich 2022-07-01 00:03:17 +01:00
  • 88eb44fd8b ipc: mach_complete_[a]sync avoid 'ret' set but not used warning Jeffrey Altman 2022-09-16 13:59:35 -04:00
  • de7b452dcb kuser: kinit renew_func do not update expire if no new tickets Jeffrey Altman 2022-09-16 13:52:37 -04:00
  • 7b914bfb64 roken: getaddrinfo get_null return errors Jeffrey Altman 2022-09-16 13:48:55 -04:00
  • 76c110e1ef hx509: hx509_verify_path remove spurious fallthrough Daria Phoebe Brashear 2022-09-16 15:27:32 -04:00
  • 133f517482 rewrite fallthrough to HEIM_FALLTHROUGH to deal with new Apple SDKs Daria Phoebe Brashear 2022-09-16 09:57:24 -04:00
  • f6d26bce66 kadm5: Correctly set userAccountControl bits Joseph Sutton 2022-04-29 12:05:50 +12:00
  • f165d1e942 lib/krb5: Avoid undefined pointer arithmetic Joseph Sutton 2022-05-18 17:18:44 +12:00
  • f40ac787b1 hxtool: Allow ca command to generate subject key Nicolas Williams 2022-08-07 18:50:06 -05:00
  • 9c0bc47efc Add hxtool(1) manual page Nicolas Williams 2022-08-07 18:49:33 -05:00
  • 4c71d1bf06 bx509: Fix typos in commentary Nicolas Williams 2022-08-07 18:58:31 -05:00
  • b19633f9b9 Use constant-time memcmp when comparing sensitive buffers Joseph Sutton 2022-02-17 15:35:51 +13:00
  • 20f038f4f0 hcrypto: Use memset_s() when clearing sensitive buffers Joseph Sutton 2022-02-17 15:34:32 +13:00
  • 88ea8039e3 hcrypto: Fix typo when clearing context structure Joseph Sutton 2022-02-17 15:33:02 +13:00
  • c0bc8beb07 httpkadmind: Test attributes defaulting Nicolas Williams 2022-04-26 17:53:48 -05:00
  • d93f0d103d httpkadmind: Clarify namespace in man page Nicolas Williams 2022-04-26 17:53:04 -05:00
  • a5271cd765 httpkadmind: Enable materialization Nicolas Williams 2022-04-25 17:41:40 -05:00
  • 18f44e7e90 httpkadmind: Make get_keys_max_spns configurable Nicolas Williams 2022-04-25 17:50:19 -05:00
  • a5273d18cd httpkadmind: Support ok-as-delegate and such Nicolas Williams 2022-04-25 17:39:29 -05:00
  • cd2e423d10 hdb: Derive pw_end for virtual services Nicolas Williams 2022-04-25 17:21:34 -05:00
  • a51708c356 kadmin: Fix kdb_attrs[] units order Nicolas Williams 2022-04-25 17:21:02 -05:00
  • 17104ea2f2 hdb: Ignore disabled namespaces Nicolas Williams 2022-04-25 16:53:00 -05:00
  • 13611702f9 roken: Fix parse_flags() orig argument type Nicolas Williams 2022-04-25 16:35:28 -05:00
  • 642990620c GHA: Also build just on WIN32 windows-build Nicolas Williams 2022-04-25 20:13:51 -05:00
  • b503100677 GHA: Fix Windows build (install texinfo) Nicolas Williams 2022-04-25 22:14:48 -05:00
  • 56b60a1a40 asn1: Fix printing of decorated types Nicolas Williams 2022-03-28 16:08:39 -05:00
  • 9a47ec2b02 kcm: Allow disabling automatic TGT renewal Steffen Kieß 2022-03-25 16:52:18 +01:00
  • 6932819419 kadmind: Test other operations after LIST Nicolas Williams 2022-03-24 17:15:43 -05:00
  • d1e7650988 krb5: Fix skew bug, or krb5_copy_context() moar Nicolas Williams 2022-03-24 16:38:17 -05:00
  • d5e21b7771 GitHub: Do not build docs in OS X Nicolas Williams 2022-03-17 21:03:17 -05:00
  • 0068ff7a94 kadmin: Fix re-entrance in iterations (part 2) Nicolas Williams 2022-03-24 14:57:57 -05:00
  • a4d3832675 kadmin: Remove unnecessary callback data ret field Nicolas Williams 2022-03-24 14:52:10 -05:00
  • 6b64ae2cde kadmin: Fix leak of dup context Nicolas Williams 2022-03-23 23:39:21 -05:00
  • 990250e462 kadm5: Fix leak in kadm5_c_dup_context() Nicolas Williams 2022-03-23 23:39:06 -05:00
  • 1e1d663bb5 kadm5: Fix failure to connect in dup handle Nicolas Williams 2022-03-23 16:59:36 -05:00
  • 621deed047 kadmin: Fix re-entrance in iterations Nicolas Williams 2022-03-23 17:00:11 -05:00