History log of /illumos-gate/usr/src/lib/gss_mechs/mech_spnego/mech/spnego_mech.c (Results 1 – 17 of 17)
Revision Date Author Comments
# 1da57d55 27-Dec-2022 Toomas Soome

15290 lib: remove pragma ident
Reviewed by: Garrett D'Amore <garrett@damore.org>
Reviewed by: Igor Kozhukhov <igor@dilos.org>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Approved

15290 lib: remove pragma ident
Reviewed by: Garrett D'Amore <garrett@damore.org>
Reviewed by: Igor Kozhukhov <igor@dilos.org>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Approved by: Patrick Mooney <pmooney@pfmooney.com>

show more ...


# 62ba43a5 08-Aug-2017 Toomas Soome

8779 mech_spnego: variable set but not used
Reviewed by: C Fraire <cfraire@me.com>
Reviewed by: Yuri Pankov <yuripv@gmx.com>
Reviewed by: Gary Mills <gary_mills@fastmail.fm>
Approved

8779 mech_spnego: variable set but not used
Reviewed by: C Fraire <cfraire@me.com>
Reviewed by: Yuri Pankov <yuripv@gmx.com>
Reviewed by: Gary Mills <gary_mills@fastmail.fm>
Approved by: Dan McDonald <danmcd@joyent.com>

show more ...


# 694c35fa 29-Jul-2013 Josef 'Jeff' Sipek

3882 Remove xmod & friends
Reviewed by: Dan McDonald <danmcd@nexenta.com>
Reviewed by: Richard Lowe <richlowe@richlowe.net>
Approved by: Richard Lowe <richlowe@richlowe.net>


# 4aed303f 14-Oct-2010 Chris Love

171 adt_get_mask_from_user frees memory before it's used
172 duplicate free in gss_accept_sec_context
173 duplicate free in spnego_gss_accept_sec_context
Reviewed by: gordon.w.ross@gmail.

171 adt_get_mask_from_user frees memory before it's used
172 duplicate free in gss_accept_sec_context
173 duplicate free in spnego_gss_accept_sec_context
Reviewed by: gordon.w.ross@gmail.com
Reviewed by: garrett@nexenta.com
Approved by: garrett@nexenta.com

show more ...


# 6a634c9d 19-Aug-2010 Richard Lowe

merge with onnv_147
Reviewed by: garrett@nexenta.com
Approved by: garrett@nexenta.com


# 5e01956f 17-Aug-2010 Glenn Barry

PSARC 2010/135 Kerberos Diagnostic Enhancements (umbrella case)
6835328 Error messages generated by applications using RPCSEC_GSS are too vague


# 94a2b249 26-Mar-2010 Glenn Barry

6929229 CVE-2010-0628 - denial of service in SPNEGO [MITKRB5-SA-2010-002][VU#839413]


# 7bbca9a1 19-Feb-2010 Mark Phalan

6906079 Memory leaks when gss_accept_sec_context is called multiple times with same security context


# 1e193afa 28-Dec-2009 Shawn Emery

6908688 SPNEGO assertion failure if CIFS client specifies IP address of server


# 72f0806a 13-Nov-2009 Shawn Emery

6885980 Need case-insensitive keytab lookups for MS interop
6885387 gsskrb5_extract_authz_data_from_sec_context() fails with service ticket sent by Windows 7 client
6858400 kclient cant join

6885980 Need case-insensitive keytab lookups for MS interop
6885387 gsskrb5_extract_authz_data_from_sec_context() fails with service ticket sent by Windows 7 client
6858400 kclient cant join Windows AD domain if hostname is 20 characters or longer
6867203 Solaris acceptors fail in Windows 2000 environment
6868908 Solaris acceptors should have returned KRB5KRB_AP_ERR_MODIFIED for Microsoft interoperability
6867208 Windows client cannot recover from KRB5KRB_AP_ERR_SKEW error

show more ...


# a0bbbcfa 13-Oct-2009 Glenn Barry

6887388 New SPNEGO features for CIFS are DOA
6888759 EXPORT_SRC build broken after push of CR 6808598


# ba7b222e 21-Sep-2009 Glenn Barry

PSARC 2009/418 Kerberos V5 PAC API
6283931 SPNEGO needs to follow latest RFC
6808598 krb5 APIs needed to create and parse PAC data
6817447 libgss and various mechs are hiding both the rea

PSARC 2009/418 Kerberos V5 PAC API
6283931 SPNEGO needs to follow latest RFC
6808598 krb5 APIs needed to create and parse PAC data
6817447 libgss and various mechs are hiding both the real minor_status and the error token

show more ...


# 5caf4451 19-May-2009 Peter Shoults

6822062 multiple vulnerabilities in SPNEGO, ASN.1 decoder (CVE-2009-0847, CVE-2009-0845, CVE-2009-0844)
6822066 ASN.1 decoder frees uninitialized pointer (CVE-2009-0846)


# 67e96bdf 31-Aug-2007 wyllys

6467709 spnego_gss_inquire_cred() can recurse indefinitely causing crash


# 0681aace 12-Aug-2005 wyllys

6302994 spnego_gss_import_sec_context has memory problem by using invalid pointer


# 354d1447 13-Jul-2005 wyllys

6259944 call gss_acquire_cred() with SPNEGO OID, it returns GSS_S_COMPLETE but did not return any credential
6260520 Call gss_context_time() with a handle of an un-established SPNEGO context, it

6259944 call gss_acquire_cred() with SPNEGO OID, it returns GSS_S_COMPLETE but did not return any credential
6260520 Call gss_context_time() with a handle of an un-established SPNEGO context, it will core dump.
6285582 gss_add_cred() is broken when input_cred_handle == GSS_C_NO_CREDENTIAL, assumes GSS_C_NO_NAME
6287358 SPNEGO init_sec_context fails when given 'actual_mechs' parameter
6290437 gss_accept_sec_context needs better handling of delegated credentials
6293338 call gss_create_empty_oid_set() with oid_set=NULL, it will seg fault.

show more ...


# 7c478bd9 14-Jun-2005 stevel@tonic-gate

OpenSolaris Launch