oysteikt/heimdal
0
0
Fork 0
Code Issues 4 Pull Requests Releases Activity

Commit Graph

  • 1a75e174ac krb5: Always try mkdir in DIR: ccache (quiet [harmless] TOCTOU warning) Nicolas Williams 2023-01-03 20:44:30 -06:00
  • b0b4510f9f krb5: Fix return of pointer to local in krb5_sendauth() (never exercised) Nicolas Williams 2023-01-03 20:45:45 -06:00
  • 46df04dafb krb5: Fix leaks Nicolas Williams 2023-01-03 20:45:15 -06:00
  • 21ada15e08 krb5: Expand breadcrumb commentary in _krb5_get_host_realm_int() Nicolas Williams 2023-01-03 01:34:03 -06:00
  • 2e7d996ea9 krb5: Fix string read overrun (fix #1057) Nicolas Williams 2023-01-03 01:33:37 -06:00
  • cc641edf6b krb5: Fix moduli open file leak Nicolas Williams 2022-12-31 00:52:04 -06:00
  • 7705ff6588 krb5: Fix FAST anon PKINIT leak Nicolas Williams 2022-12-31 00:51:46 -06:00
  • 59e13ad299 krb5: Quiet static analyzer warning in store.c Nicolas Williams 2023-01-02 20:31:48 -06:00
  • 5535ace6ea krb5: Fix ignored error in SCC: ccache Nicolas Williams 2023-01-02 20:31:20 -06:00
  • 0fba239baa krb5: Quiet static analyzer warning in name canon rules Nicolas Williams 2023-01-02 20:30:38 -06:00
  • e5a8a6f972 krb5: Quiet static analyzer warning in krbhst Nicolas Williams 2023-01-02 20:30:16 -06:00
  • a1c0639ddd krb5: Fix NULL deref in KCM: ccache Nicolas Williams 2023-01-02 20:29:32 -06:00
  • 2e11ecefba krb5: Fix krb5_copy_context() use-after-free copy-pasto Nicolas Williams 2023-01-02 20:29:05 -06:00
  • 8b44896bc1 hx509: Fix harmless TOCTOU in load_crl() Nicolas Williams 2023-01-03 20:41:45 -06:00
  • 64254d64dd hx509: Fix ENOMEM free of garbage encoding PKCS#10 Nicolas Williams 2023-01-03 20:41:13 -06:00
  • 1473b96d1c hx509: Fix leak in templated certificates Nicolas Williams 2023-01-03 20:40:02 -06:00
  • 06fdd14d4d hx509: Quiet static analyzer false positives Nicolas Williams 2023-01-03 20:39:35 -06:00
  • 86af011f0b hcrypto: Fix integer undeflow in rsa-ltm.c Nicolas Williams 2023-01-03 20:43:15 -06:00
  • 274b683d76 hcrypto: Fix warning in HMAC_Init_ex() Nicolas Williams 2022-12-30 16:38:55 -06:00
  • 20c4c0dea9 asn1: Fix ENOMEM leak in der_print_bit_string() Nicolas Williams 2023-01-03 20:38:00 -06:00
  • 26b1acf3b8 asn1: Remove unused variable assignment in main.c Nicolas Williams 2022-12-30 16:38:38 -06:00
  • 9fc2e943ca base: Fix use-after-free in heim_path_vcreate() Nicolas Williams 2023-01-03 20:37:26 -06:00
  • 23a9ca27a5 base: Fix use-after-free db.c (mostly unused in prod) Nicolas Williams 2023-01-03 20:22:32 -06:00
  • c05294e2c5 base: Remove unused variable assignment in JSON string parsing Nicolas Williams 2022-12-30 16:38:30 -06:00
  • a331a7a04f wind: Check for integer overflow in idn-lookup utility Nicolas Williams 2022-12-30 16:38:13 -06:00
  • 0ffb00275a sl: Fix leak Nicolas Williams 2022-12-31 00:50:10 -06:00
  • b93129f83d roken: Fix FD and memory leaks in rk_undumptext() Nicolas Williams 2023-01-03 20:21:47 -06:00
  • 11c0cbe9c2 roken: Fix base32/64 decode slowness Nicolas Williams 2023-01-03 20:19:47 -06:00
  • 7c3a064764 roken: Quiet warnings at mergesort callers Nicolas Williams 2023-01-03 20:18:17 -06:00
  • aee72d61bf roken: Move an #endif in issuid() to avoid dead code Nicolas Williams 2022-12-30 19:16:51 -06:00
  • 319793b30b roken: Fix leak in new undump_not_file() Nicolas Williams 2022-12-30 16:38:07 -06:00
  • 73b42d3238 Build rk_closefrom even if including in libc Brian May 2022-08-26 09:15:13 +10:00
  • 77a452f4fd kdc: Make path to MIT Kerberos for testing configurable Nicolas Williams 2022-12-30 19:15:16 -06:00
  • 0f769dde17 cf: Make path to MIT Kerberos for testing configurable Nicolas Williams 2022-12-30 19:15:06 -06:00
  • 594c478482 GHA: Fix Coverity build Nicolas Williams 2023-01-02 21:51:36 -06:00
  • 58e07f8882 krb5: Fix(?) st_nlink check in fcache.c Nicolas Williams 2022-12-29 22:27:42 -06:00
  • f4fd02b810 Increment hcrypto library version Brian May 2022-11-24 09:02:08 +11:00
  • 5c74a82e98 kadm5: Fix #1055 Nicolas Williams 2022-12-29 12:20:19 -06:00
  • 1d9ea9b73c kadm5: Add better fuzz inputs Nicolas Williams 2022-12-22 18:14:07 -06:00
  • 42b0702601 krb5: Better checking for storage EOF Nicolas Williams 2022-12-22 17:55:13 -06:00
  • 662fda9608 kadm5: Add a fuzzer input for test_marshall Nicolas Williams 2022-12-21 23:42:34 -06:00
  • 66b16d12d8 roken: Use calloc() for overflow det. in hex_encode Nicolas Williams 2022-12-21 22:46:07 -06:00
  • dc3ac8592b heimbase-atomics: let heim_base_atomic_* use 'long' instead of 'int' on AIX Stefan Metzmacher 2022-12-22 11:45:10 +01:00
  • 1e5cb64569 heimbase-atomics: fix heim_base_atomic_* on AIX Stefan Metzmacher 2022-12-22 11:36:06 +01:00
  • 131d90c414 bx509d: Fix tests skipping on OS X Nicolas Williams 2022-12-21 18:23:32 -06:00
  • 07ce06e7b2 kadm5: Add test_marshall program Nicolas Williams 2022-12-21 17:57:41 -06:00
  • 8b6926f4c0 roken: Add rk_undumptext() and support ttys and such Nicolas Williams 2022-12-20 22:22:06 -06:00
  • ca2467a4c4 roken: Do not use net_read() for regular files! Nicolas Williams 2022-12-20 22:19:39 -06:00
  • 8f71755d2b kadmind: Fix uninitialized heap pointer use (#1051) Nicolas Williams 2022-12-19 18:06:24 -06:00
  • 8423016920 doc: Fix dvi/pdf/ps build Nicolas Williams 2022-12-19 17:54:11 -06:00
  • 42fff5ec5f hx509: Add content and some EXAMPLES to hxtool(1) Nicolas Williams 2022-12-19 16:27:28 -06:00
  • d24b7fd8b2 hx509: Add hxtool cc --no-root-certs, --no-private-keys, and --append options Nicolas Williams 2022-12-19 16:26:03 -06:00
  • 6def4750bc hx509: Add HX509_CERTS_STORE_NO_ROOTS flag Nicolas Williams 2022-12-19 16:24:23 -06:00
  • 49c00512a7 hx509: Don't check if non-self-signed certs have a self-signing capable signature alg Nicolas Williams 2022-12-19 16:23:03 -06:00
  • 168124cd09 hx509: Add hx509_cert_is_{ca,root,self_signed}() Nicolas Williams 2022-12-19 16:21:39 -06:00
  • e2e7eacb6f base: Do not include config.h twice Nicolas Williams 2022-12-14 11:57:55 -06:00
  • fd6597614e bx509d: Add test of IPC CSR authorizer Nicolas Williams 2022-11-29 16:17:45 -06:00
  • f47f15d5b9 bx509d: /get-tgts: Allow piecemeal authorization Nicolas Williams 2022-11-28 18:12:04 -06:00
  • ba93778682 bx509d: Set log destination Nicolas Williams 2022-12-06 15:15:45 -06:00
  • cf020532c2 bx509d: Fix leak of error messages Nicolas Williams 2022-11-30 09:32:54 -06:00
  • d5a87e5906 roken: Add easprintf() and evasprintf() utils Nicolas Williams 2022-12-08 20:13:44 -06:00
  • aaff3aa5c5 Do not include config.h in heimbase.h (fix #447) Nicolas Williams 2022-12-08 13:20:58 -06:00
  • 4303e7b2a3 base: Make heim_log_ref() thread-safe (fix build) Nicolas Williams 2022-12-07 21:39:20 -06:00
  • 9fb46adf97 kadmin: Support heredocs better to speed up tests Nicolas Williams 2022-12-07 21:26:01 -06:00
  • 1c4902378f base: Make heim_log_ref() thread-safe Nicolas Williams 2022-12-06 15:15:15 -06:00
  • 9152d38d27 sl: Unknown commands -> error Nicolas Williams 2022-12-07 21:25:37 -06:00
  • 0a15a9eea6 sl: Support continued line inputs for heredocs Nicolas Williams 2022-12-07 21:24:51 -06:00
  • 4da64d119e hx509: Return better error in CSR authorization functions Nicolas Williams 2022-11-29 17:57:14 -06:00
  • ce1dd5fc76 hx509: Export missing CSR authz symbols Nicolas Williams 2022-11-30 00:28:18 -06:00
  • 674696151a gss-token: Fix acceptor context leak Nicolas Williams 2022-12-05 23:01:32 -06:00
  • f0feaab938 asn1: Template CHOICE element 0 bug Nicolas Williams 2022-11-30 11:22:22 -06:00
  • 50eb3bc245 asn1: Fix 1-byte leaks in der_copy_octet_string() Nicolas Williams 2022-11-30 10:48:48 -06:00
  • 0c08fb9e3a ipc: Exclude UNIX: prefix in socket name Nicolas Williams 2022-11-29 17:55:06 -06:00
  • badbef825d roken: Add trailing / to PID file DIR path Nicolas Williams 2022-11-29 17:54:19 -06:00
  • b4c0ef9970 asn1: ensure quoting of default string values Luke Howard 2022-11-26 22:38:31 +11:00
  • 5dd018b7ed hx509: Get i2d_PUBKEY() prototype from correct header Nicolas Williams 2022-11-22 15:32:43 -06:00
  • cd02c50be5 kdc: OpenSSL 3.0 support Nicolas Williams 2022-11-19 22:03:50 -06:00
  • 6336cf69d4 krb5: OpenSSL 3.0 support Nicolas Williams 2022-11-19 15:09:47 -06:00
  • 264f0bd1a2 hx509: OpenSSL 3.0 support Nicolas Williams 2022-11-18 23:31:51 -06:00
  • 0d5b238186 hx509: PKCS#12 missing error check Nicolas Williams 2022-11-20 00:30:13 -06:00
  • cce8ae9927 hx509: Pass PKCS#8 keys to lower layers Nicolas Williams 2022-11-19 23:43:27 -06:00
  • 2ddea96ba2 hcrypto: Use builtin 1DES/RC2/RC4 (OpenSSL 3) Nicolas Williams 2022-11-17 19:00:49 -06:00
  • 11846fcabb hcrypto: Fix EVP_CipherUpdate() bugs Nicolas Williams 2022-11-21 14:24:31 -06:00
  • 47e6c68de8 hcrypto: OpenSSL's EVP_Cipher() returns a length Nicolas Williams 2022-11-17 18:57:35 -06:00
  • 83cd1255f6 cf: Check for OpenSSL FIPS Nicolas Williams 2022-11-21 12:09:07 -06:00
  • ac8c1341fb cf: Check for OpenSSL 3.0 Nicolas Williams 2022-11-21 12:06:59 -06:00
  • aa3355e3bf hcrypto: Remove dead MD2 code Nicolas Williams 2022-11-17 12:56:20 -06:00
  • 8f9c2d115e lib/krb5: remove dead code from pk_verify_host() Stefan Metzmacher 2022-03-03 17:28:24 +01:00
  • 4baf76220c lib/krb5: remove unused krb5_krbhst_info argument of pk_verify_host() Stefan Metzmacher 2022-03-03 17:26:57 +01:00
  • 7b3b67be37 lib/krb5: remove unused krb5_krbhst_info argument of pk_rd_pa_reply_enckey() Stefan Metzmacher 2022-03-03 17:22:10 +01:00
  • 94443d4768 lib/krb5: remove unused krb5_krbhst_info argument of pk_rd_pa_reply_dh() Stefan Metzmacher 2022-03-03 17:17:52 +01:00
  • 600e126135 lib/krb5: remove unused krb5_krbhst_info argument from _krb5_pk_rd_pa_reply() Stefan Metzmacher 2022-03-03 17:12:18 +01:00
  • c5feb63c55 lib/krb5: remove unused krb5_krbhst_info argument of pa_step_f Stefan Metzmacher 2022-03-03 17:10:11 +01:00
  • 893522a79f lib/krb5: remove unused krb5_krbhst_info argument to pa_step() Stefan Metzmacher 2022-03-03 17:03:36 +01:00
  • 315592f018 lib/krb5: remove unused krb5_krbhst_info argument of process_pa_data_to_key() Stefan Metzmacher 2022-03-03 17:01:18 +01:00
  • a4fc4dcb6a lib/krb5: mark in argument of krb5_init_creds_step() as const Stefan Metzmacher 2022-03-03 18:03:17 +01:00
  • fd75c3e23c lib/krb5: let krb5_init_creds_step() return an out_realm Stefan Metzmacher 2022-03-03 18:02:35 +01:00
  • b0bc54c921 lib/krb5: let krb5_init_creds_step() return an allocated out buffer Stefan Metzmacher 2022-03-03 17:49:36 +01:00
  • 30c978f013 lib/krb5: fix krb5_init_creds_step() interaction with krb5_fast_anon_pkinit_step() Stefan Metzmacher 2022-03-03 17:45:02 +01:00
  • acaa62636f lib/krb5: krb5_init_creds_get() passes hostinfo=NULL to krb5_init_creds_step() Stefan Metzmacher 2022-03-03 16:48:08 +01:00