gssproxy

#244 Fix explicit NULL deref around encrypted token processing
Merged by rharwood. Opened by rharwood.
rharwood/gssproxy padding  into  master

Download 244.patch

Should fix: https://bugzilla.redhat.com/show_bug.cgi?id=1699331

Can we change this to be less clever and align safe ?
Like:

uint32_t buflen;
memcpy(&buflen, buf, 4);
*len = ntohl(*buflen);
Edited by simo

3 new commits added

  • Include length when using krb5_c_decrypt()
  • Handle gss_import_cred() failure when importing gssx creds
  • Always initialize out cred in gp_import_gssx_cred()

Sure, updated. (The cast-style is what postgres does, and I don't like it either.)

ACK

Commit 87957caf fixes this pull-request

Pull-Request has been merged by rharwood

Commit 84cf88f6 fixes this pull-request

Pull-Request has been merged by rharwood

Commit 5697dfd9 fixes this pull-request

Pull-Request has been merged by rharwood
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.