Commit Graph

  • 257be08bbb GitHub: Make valgrind build a debug build Nicolas Williams 2022-01-18 10:31:15 -06:00
  • f155150969 kdc: Rewrite get_pa_etype_info and set_salt_padata Nicolas Williams 2022-01-18 00:22:42 -06:00
  • 2801606b80 GitHub: Fix valgrind build Nicolas Williams 2022-01-18 01:14:59 -06:00
  • a1481f1f05 kdc: Check krb5_ret_uint32() in connect loop Nicolas Williams 2022-01-18 00:42:00 -06:00
  • fcba7a9fd1 kdc: Check errors from krb5_auth_con_getauthenticator() Nicolas Williams 2022-01-18 00:32:23 -06:00
  • 4ed4f2159c krb5: Check errors in krb5_auth_con_getauthenticator() Nicolas Williams 2022-01-18 00:31:54 -06:00
  • 1a08b3b47f kdc: Make --kdc-request-log-file concrrency-safe Nicolas Williams 2022-01-18 00:19:15 -06:00
  • d41467dcde kdc: Explicitly ignore setsockopt() result Nicolas Williams 2022-01-18 00:16:09 -06:00
  • ef059b8831 heimdal:base: Don't perform arithmetic on a NULL pointer Joseph Sutton 2021-07-14 16:03:21 +12:00
  • 1c93a6ff26 heimdal: Avoid overflow when performing bitwise shift operations Joseph Sutton 2021-07-14 16:04:48 +12:00
  • bc37bf1afd kdc: use public audit API in altsecid authorizer plugin Luke Howard 2022-01-18 16:27:05 +11:00
  • 376d347500 GitHub: Use just clang for valgrind build Nicolas Williams 2022-01-17 23:13:08 -06:00
  • 94ed961d02 kdc: make auditing API public Luke Howard 2022-01-14 15:23:48 +11:00
  • 4befd3e355 kdc: remove krb5_ prefix for KDC attribute functions Luke Howard 2022-01-17 09:43:00 +11:00
  • 5fa0b7b6ff lib/krb5: krb5_sento_context KRB5_SENDTO_DONE KRB5_SENDTO_FAILED Jeffrey Altman 2022-01-17 22:59:39 -05:00
  • 238fd7c6c6 kdc: kdc_issue_certificate remove dead code Jeffrey Altman 2022-01-17 22:41:33 -05:00
  • 51575264d4 kadmin: read_words pass correct type to sizeof Jeffrey Altman 2022-01-17 22:21:44 -05:00
  • 2cd3f7089e kdc: cmd_append fix broken commit Jeffrey Altman 2022-01-17 22:35:04 -05:00
  • 0e19c6b429 GitHub: Don't use find -cpio Nicolas Williams 2022-01-17 21:29:46 -06:00
  • 4101280459 kdc: cmd_append do not forget va_end() Jeffrey Altman 2022-01-17 22:05:36 -05:00
  • d0e2467120 kdc: _kdc_do_kx509 prevent use of NULL cprincipal Jeffrey Altman 2022-01-17 21:57:07 -05:00
  • 4b6fb5ab1a kdc: _kdc_find_etype prevent NULL dereference Jeffrey Altman 2022-01-17 21:51:57 -05:00
  • 0e3acff241 lib/hcrypto: mpz2BN unsafe to call mp_to_ubin with NULL Jeffrey Altman 2022-01-17 21:41:21 -05:00
  • 1ebebe1d2f lib/hcrypto: RSA_check_key if rsa->n is NULL cannot call RSA_size Jeffrey Altman 2022-01-17 21:36:49 -05:00
  • ee3cd2e4a9 lib/hcrypto: RSA_new_method pass correct ptr to ENGINE_finish Jeffrey Altman 2022-01-17 21:28:37 -05:00
  • 94a7e97e09 lib/hcrypto: DH_new_method pass correct ptr to ENGINE_finish Jeffrey Altman 2022-01-17 21:27:00 -05:00
  • 5c7a4436e3 lib/hcrypto: dh-ltm update use of libtommath Jeffrey Altman 2022-01-17 20:41:54 -05:00
  • 00dd104b96 gsskrb5: Fix dead code issues in deleg cred path Nicolas Williams 2022-01-17 18:10:08 -06:00
  • 82b8c906e9 gsskrb5: Fix incorrect allocation failure check Nicolas Williams 2022-01-17 18:00:51 -06:00
  • 77c048db9b gss: Check add_builtin() errors Nicolas Williams 2022-01-17 17:59:10 -06:00
  • 0bbf13722d roken: Remove dead code in rk_strsvisx() Nicolas Williams 2022-01-17 17:49:29 -06:00
  • 990816bc4b roken: Cast ignored function returns to void Nicolas Williams 2022-01-17 17:46:26 -06:00
  • b4f9c8772b roken: Fix base32(1) crash on empty file Nicolas Williams 2022-01-17 17:43:23 -06:00
  • 68ddc50020 roken: Fix base64(1) crash on empty file Nicolas Williams 2022-01-17 17:42:17 -06:00
  • dd71303a2f hx509: Fix coverity warnings Nicolas Williams 2022-01-17 17:36:48 -06:00
  • 2e729a9aa2 hdb: Fix coverity warnings Nicolas Williams 2022-01-17 17:32:24 -06:00
  • b9a915c163 base: Fix various coverity warnings Nicolas Williams 2022-01-17 16:22:55 -06:00
  • 9c41d66447 kcm: kcm_op_do_ntlm dead code removal Jeffrey Altman 2022-01-17 17:05:56 -05:00
  • 68e2135361 asn1: Fix coverity warnings Nicolas Williams 2022-01-17 15:59:38 -06:00
  • a0278f7da2 asn1: Add error checking for open types Nicolas Williams 2022-01-17 15:59:25 -06:00
  • 9ab9fe04f2 lib/ntlm: ret_string fix memory allocation check Jeffrey Altman 2022-01-17 16:57:54 -05:00
  • 15ef584f59 lib/sl: gen_wrapper free 'n' before return Jeffrey Altman 2022-01-17 16:55:51 -05:00
  • 3a52803e19 appl/kf: doit close socket before returning Jeffrey Altman 2022-01-17 16:50:04 -05:00
  • 27a2ad7bfc lib/kerb: verify_user_opt_int pass krb5_creds by ptr verify_common Jeffrey Altman 2022-01-17 16:22:56 -05:00
  • b6114c5492 krb5: Make krb5_data_cmp() be good for sorting Nicolas Williams 2022-01-17 15:11:14 -06:00
  • 4b7ad8ee43 hx509: Fix strerror(negative); streamline code Nicolas Williams 2022-01-17 14:59:23 -06:00
  • 7cfab00e37 kdc: One more memcmp() implicit comparison to 0 Nicolas Williams 2022-01-17 14:58:13 -06:00
  • 9a0372d992 kdc: Still prefer encryption types with "not default" salts except for des-cbc-crc Joseph Sutton 2021-11-16 10:51:06 +13:00
  • 9fb444983e asn1: Better handling of >63 named bits/ints Nicolas Williams 2022-01-17 12:39:19 -06:00
  • bf243c1f41 kdc: Fix ENOMEM path null deref (synthetic princs) Nicolas Williams 2022-01-17 12:20:15 -06:00
  • a25cf6335e krb5: Fix ENOMEM path null deref in _krb5_pac_sign Nicolas Williams 2022-01-17 12:16:28 -06:00
  • e15657679c krb5: Check for errors in pa_announce() Nicolas Williams 2022-01-17 12:14:23 -06:00
  • 014aa4569d krb5: Attempt to quiet coverity in warning user Nicolas Williams 2022-01-17 12:11:38 -06:00
  • 2e631d3b1b krb5: FAST: Remove dead code Nicolas Williams 2022-01-17 11:53:42 -06:00
  • 7fe5799090 gsskrb5: Fix dead code in get_transited() Nicolas Williams 2022-01-17 11:50:16 -06:00
  • e894ed0162 krb5: Remove dead code in enc_chal_step() Nicolas Williams 2022-01-17 11:35:12 -06:00
  • 5c68a02407 krb5: FAST: Fix potential double-free Nicolas Williams 2022-01-17 11:22:19 -06:00
  • fc42ff0212 krb5: Fix NULL-deref in send_to_kdc Nicolas Williams 2022-01-17 11:16:07 -06:00
  • 04b07ff8b6 kdc: Quiet a coverity warning (TGS) Nicolas Williams 2022-01-17 11:05:05 -06:00
  • 3e51a0b84a kdc: Quiet a coverity warning Nicolas Williams 2022-01-17 11:04:21 -06:00
  • fe63ddc487 gsskrb5: Remove dead code in split_attr() Nicolas Williams 2022-01-17 11:01:19 -06:00
  • ad4e055831 base: Add r->kv not-null check before using it Nicolas Williams 2022-01-17 10:58:40 -06:00
  • cf37c99222 krb5: get_cred: Add missing enc retval check Nicolas Williams 2022-01-17 10:53:13 -06:00
  • c3643bb607 krb5: Remove KEYRING ccache dead code Nicolas Williams 2022-01-17 10:48:28 -06:00
  • d658aa9b11 kadm5: Fix error-path leak Nicolas Williams 2022-01-17 10:48:07 -06:00
  • 4d5c5c6737 kdc: Add missing encryption retval check Nicolas Williams 2022-01-17 10:47:41 -06:00
  • dca1048e96 gss: use memset rather than {0} to initialize channel bindings Luke Howard 2022-01-17 22:18:44 +11:00
  • 0f843189a4 kadmin: Check for errors in init Nicolas Williams 2022-01-17 00:45:08 -06:00
  • fc5f917a66 hdb: Fix SQLite3 backend EXISTS error Nicolas Williams 2022-01-17 00:44:47 -06:00
  • 63f9fc172c kadmin: kadmind_dispatch free 'ks_tuple' before overwriting Jeffrey Altman 2022-01-17 00:16:27 -05:00
  • 6fc38099f7 ipropd: Initialize struct sigaction Nicolas Williams 2022-01-16 23:09:17 -06:00
  • 3d9333cefa kdc: Fix build Nicolas Williams 2022-01-16 23:08:49 -06:00
  • d974c37a90 kadmin: Remove dead code in add_one_namespace() Nicolas Williams 2022-01-16 23:08:32 -06:00
  • 7f2cf34b1d gss: _gss_negoex_accept make error const Luke Howard 2022-01-17 15:44:50 +11:00
  • ce0ba125d9 gss: _gss_negoex_init make error const Luke Howard 2022-01-17 15:43:34 +11:00
  • 231aa68895 kadmin: add_one_namespace do not leak princ_ent Jeffrey Altman 2022-01-16 23:42:21 -05:00
  • 54adba6023 kadmin: format_field KRB5_TL_ETYPES do not leak enctype string Jeffrey Altman 2022-01-16 23:32:10 -05:00
  • 1383677642 kdc: update_csr do not leak error messages Jeffrey Altman 2022-01-16 23:28:13 -05:00
  • 423acdfe77 kdc: check_authz free 'cprinc' on success Jeffrey Altman 2022-01-16 23:25:06 -05:00
  • ff18c32ae4 lib/gssapi/ntlm: from_file do not leak 'f' on error Jeffrey Altman 2022-01-16 23:10:33 -05:00
  • 6e8ab0c204 lib/gssapi/spnego: _gss_negoex_accept do not leak error message Jeffrey Altman 2022-01-16 23:04:54 -05:00
  • ac53ce5c99 lib/gssapi/spnego: _gss_negoex_init do not leak error message Jeffrey Altman 2022-01-16 23:02:38 -05:00
  • 8254c01ae7 lib/gssapi/spnego: accept_sec_context free 'supported_mechs' Jeffrey Altman 2022-01-16 22:57:15 -05:00
  • 401bdd8bf3 lib/hx509: hx509_request_get_san SAN_TYPE_PKINIT return failure Jeffrey Altman 2022-01-16 22:32:18 -05:00
  • 424aa1cb78 lib/asn1: _asn1_print_open_type free 'indents' Jeffrey Altman 2022-01-16 22:22:48 -05:00
  • 73e2f335c2 lib/hdb: entry2mit_string_int free unparsed name on error Jeffrey Altman 2022-01-16 22:19:39 -05:00
  • b63da31622 lib/hdb: test_namespace free hex string Jeffrey Altman 2022-01-16 22:14:26 -05:00
  • a73c45bef1 lib/hx509: hxtool test_crypto destroy 'vctx' Jeffrey Altman 2022-01-16 22:11:28 -05:00
  • 53e0b5448e lib/hx509: revoke_print addrof to hx509_revoke_free Jeffrey Altman 2022-01-16 22:05:38 -05:00
  • 603ee4d65d lib/hx509: _hx509_cert_to_env free 'buf' Jeffrey Altman 2022-01-16 21:59:49 -05:00
  • 1a793c04fa lib/hx509: revoke_print free revoke_context Jeffrey Altman 2022-01-16 21:53:06 -05:00
  • c59dd0b36c lib/hx509: hx509_request_get_san handle strpool on error Jeffrey Altman 2022-01-16 21:36:28 -05:00
  • 708d9b4042 hx509_request_get_san can return an output string on failure Jeffrey Altman 2022-01-16 21:36:09 -05:00
  • 3065730b8a lib/kadm5: find_db_spec do not leak 'info' Jeffrey Altman 2022-01-16 21:03:00 -05:00
  • 1247ca977c lib/kadm5: kadm5_ad_init_with_password_ctx free 'ctx' Jeffrey Altman 2022-01-16 20:09:12 -05:00
  • 7c01b2af68 lib/kadm5: _kadm5_c_get_cred_cache free 'client' Jeffrey Altman 2022-01-16 20:01:45 -05:00
  • f466b43975 lib/krb5: fallback_get_hosts free addrinfo if gTLD collision or error Jeffrey Altman 2022-01-16 19:50:40 -05:00
  • 9c27eaa079 lib/krb5: krb5_rc_store always fclose(f) Jeffrey Altman 2022-01-16 19:37:44 -05:00
  • 0a088b9b61 lib/krb5: make_pa_tgs_req do not pass ptr to in param to allocator Jeffrey Altman 2022-01-16 19:31:34 -05:00
  • 5838fcaa61 lib/krb5: build_logon_name use common 'out' do not leak 's2' Jeffrey Altman 2022-01-16 19:13:26 -05:00