Joseph Sutton b19633f9b9 Use constant-time memcmp when comparing sensitive buffers ...

This helps to avoid timing attacks.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

2022-04-30 13:35:52 -04:00

..

accept_sec_context.c

fix memory leak near NTLM type2 response

2022-01-22 21:54:20 -05:00

acquire_cred.c

gss: don't provide domain to nsi_probe() in NTLM

2020-02-04 17:28:35 +11:00

add_cred.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

canonicalize_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

compare_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

context_time.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

creds.c

lib/gssapi/ntlm: _gss_ntlm_inquire_cred dead code removal

2022-01-23 23:11:46 -05:00

crypto.c

Use constant-time memcmp when comparing sensitive buffers

2022-04-30 13:35:52 -04:00

delete_sec_context.c

_gss_ntlm_delete_sec_context() mem leaks

2022-01-22 21:54:20 -05:00

display_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

display_status.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

duplicate_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

duplicate_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_sec_context.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

external.c

Add stub for gss_acquire_cred_impersonate_name().

2021-10-19 20:45:40 +11:00

import_name.c

support NT_USER_NAME for real

2011-05-22 13:02:08 -07:00

import_sec_context.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

indicate_mechs.c

drop RCSID

2009-11-14 11:15:57 -08:00

init_sec_context.c

_gss_ntlm_init_sec_context() mem leaks

2022-01-22 21:54:20 -05:00

inquire_context.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred_by_mech.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_mechs_for_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_names_for_mech.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

inquire_sec_context_by_oid.c

Use UTF-8 in KTH copyright notice

2021-11-29 12:50:26 +11:00

iter_cred.c

Use UTF-8 in KTH copyright notice

2021-11-29 12:50:26 +11:00

kdc.c

fix memory leak near NTLM type2 response

2022-01-22 21:54:20 -05:00

ntlm.h

Rewrite gss_add_cred() (fix #413)

2018-12-28 19:26:25 -06:00

process_context_token.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

release_cred.c

Fix memory leak in _gss_ntlm_release_cred.

2017-05-22 12:05:00 -05:00

release_name.c

gss: remove SPNEGO name wrappers

2020-02-04 17:28:35 +11:00

set_sec_context_option.c

Use UTF-8 in KTH copyright notice

2021-11-29 12:50:26 +11:00