repo.or.cz
/
heimdal.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
gsskrb5: CVE-2022-3437 Pass correct length to _gssapi_verify_pad()
2022-11-15
Josep
h
Sutton
gsskrb5: CVE-20
2
2-3437 Pas
s
correc
t
length
t
o _gssa
p
i_
v
er
i
f
y
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Joseph Sutto
n
gsskrb5: C
V
E-
2
022-3
4
37 Che
c
k
fo
r
overflow in
_gsskrb5
_
get_mech()
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Joseph Sutto
n
gsskrb5: C
V
E-202
2
-343
7
Check bu
f
fer
length a
g
ain
s
t
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Jo
s
eph
S
u
t
ton
gs
s
krb5:
CVE-2022-
3
437 Che
c
k
t
h
e
re
s
ult of _gsskrb5_
g
e
t
_mech()
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Joseph Sutton
gs
s
krb
5
: CVE
-
2022
-
3437
Avoid undefined behaviour in
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Josep
h
Sutto
n
gssk
r
b5: C
V
E-20
2
2-3437 Don't pass NULL poi
n
ters to
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Joseph
Sutton
gs
s
krb
5
: CVE-2022-3437 Use constant-time memcmp
(
) in
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
Joseph Sutton
gsskrb5: CVE-2022
-
343
7
Use
c
onstant-tim
e
m
e
mcmp() for
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-11-15
J
osep
h
Sutt
o
n
krb
5
: CVE-2022
-
4289
8
PAC par
s
e integer overf
l
ows
Joseph Sutton <
josephsutton@catalyst.net.nz
>.
commit
|
commitdiff
|
tree
2022-09-27
Joseph Sutton
l
i
b/krb5: Fix
l
eak in erro
r
path
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-09-16
J
o
seph Sutton
kadm5: Cor
r
ectly
s
e
t
userAcc
o
u
n
tControl
bits
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-09-16
Jos
e
ph Sutton
lib/krb5
:
Avoid u
n
defined pointer arit
h
m
e
tic
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-04-30
Joseph Sutton
Use con
s
tant-ti
m
e memcmp when comp
a
ring sens
i
tive buf
f
ers
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-04-30
Joseph
S
utton
hcryp
t
o: Us
e
me
m
s
et_s() when clearing sensitive
b
uffers
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-04-30
Joseph
Sutton
hc
r
ypto: F
i
x typo when
clearing
c
ontext structure
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-03-12
Joseph Sutto
n
roken: Fix time_t overflo
w
checking
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-03-08
Jo
s
eph Sut
t
on
kdc: Add fu
n
ction
to add encrypted padata
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-03-08
Josep
h
Sutton
l
ib/k
r
b5: Ma
k
e param
e
te
r
s
t
o PAC fun
c
t
i
ons 'const'
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-01-18
Joseph Sutt
o
n
h
e
i
mdal:base: Don'
t
perform arithmetic on a NULL poi
n
ter
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-01-18
Joseph Sutton
he
i
mdal: Avoid overflow wh
e
n performing bitwise
shi
f
t
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2022-01-17
Jose
p
h Su
t
ton
kdc: Still prefer enc
r
ypti
o
n types wit
h
"not
d
efault
.
.
.
commit
|
commitdiff
|
tree
2021-12-20
Jose
p
h
Sutton
kdc: Return
err
o
r code from
_kdc_check_
p
ac()
with an
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-20
Joseph Su
t
t
on
kdc: Fix N
U
L
L pointer dereference on
fai
l
ure t
o
verif
y
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-17
Joseph Su
t
ton
kdc: Check PAC of armor tickets
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-17
Joseph Sutton
kdc: Don'
t
return
PREAUTH_FAILED if encrypted challen
g
e
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
kd
c
: Optiona
l
ly allow missing additional
ticke
t
PAC
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
J
oseph Sutton
kdc: Add krb5_is_enctype_o
l
d() to d
e
termine whether
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutt
o
n
kdc: Ve
r
i
f
y
PAC
i
n T
G
T provided for us
e
r-to-us
e
r authentic
a
tion
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sut
t
on
kdc:
C
heck name in request against name in user-to
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutt
o
n
kdc:
Use sname
from req
u
est rather
t
han user-to-user
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
k
d
c
:
Move fe
t
ch
i
ng krbtgt entr
y
to before en
c
type sele
c
tion
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
k
d
c: Chec
k
return code
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph
Sut
t
on
kdc: Avoid races and
m
ult
i
ple DB lookups in s4u2self
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Jose
p
h Sutton
kdc: Optionally
requi
r
e that
PAC
b
e be pre
s
ent
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
kdc: C
h
eck PAC of armor tickets
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-16
J
o
seph Sutton
kd
c
:
M
ak
e
check_PA
C
() and verify_f
l
ags() acc
e
ssi
b
le
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-15
Joseph Sutton
k
d
c: Don't advertise padata types t
h
at will
n
ot
b
e
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Jo
s
ep
h
Sutton
kdc: Don't keep trying keys
f
or encrypted-chal
l
e
nge
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
J
oseph
S
ut
t
on
kdc: Check authdata in
t
ick
e
t r
a
ther than in request
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Josep
h
Sutton
kdc
:
Add s
u
pp
o
rt
f
or e
x
plicit armoring from MS-KIL
E
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutt
o
n
k
d
c
:
Allow RODC-iss
u
ed armor ticket
s
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutton
hei
m
dal: Make _k
r
b5_
p
ac_get_kdc_checksum_i
n
fo()
i
nto
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutton
kdc: Fix
l
eak
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutton
krb5:
C
heck asp
r
i
n
tf return
v
a
l
ue
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sut
t
on
asn1: Fix b
i
nary search off-by
-
one read
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-08
J
o
sep
h
S
u
tto
n
s4/heimdal
/
lib/krb5/pac
.
c: Ali
g
n
PAC buffers to
m
atch
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-07
Jos
e
ph Sutton
hei
m
dal:kdc: Match Wi
n
do
w
s error c
o
de fo
r
unsu
p
ported
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-07
J
oseph Sutton
he
i
m
d
al:kdc: Properly che
c
k f
o
r unsupported critical
.
.
.
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree
2021-12-07
Jos
e
ph Sutton
he
i
m
d
al: Initial
i
se KDC r
e
pl
y
Signed-off-by: Joseph Sutton <
josephsutton@catalyst.net.nz
>
commit
|
commitdiff
|
tree