repo.or.cz
/
heimdal.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
Use constant-time memcmp when comparing sensitive buffers
2022-04-30
Joseph Sut
t
on
Use constant-time me
m
c
mp when comparing sensitive
b
u
ff
e
rs
commit
|
commitdiff
|
tree
2022-04-30
Josep
h
Sutton
hcrypto: Use memset_s()
w
hen clearing sensit
i
ve b
u
ffers
commit
|
commitdiff
|
tree
2022-04-30
Jose
p
h
S
utton
hcrypto:
F
ix typo
w
he
n
c
l
earing
co
n
text st
r
ucture
commit
|
commitdiff
|
tree
2022-03-12
Joseph
Sutto
n
roke
n
: Fix
time_t overflow ch
e
cking
commit
|
commitdiff
|
tree
2022-01-30
Luke Howard
g
s
s: remove gss_get_insta
n
ce()
commit
|
commitdiff
|
tree
2022-01-24
Jeffr
e
y
Altman
assert no
n
-
N
ULL ptrs before
c
alling m
e
m funcs
commit
|
commitdiff
|
tree
2022-01-21
Jeff
r
ey
Altman
Follow
the Linux ker
n
el's
l
ead on "fa
l
lt
h
rough"
commit
|
commitdiff
|
tree
2022-01-18
Nico
l
as Will
i
ams
kdc:
R
ewri
t
e get
_
pa_etype_info and set_sa
l
t_pada
t
a
commit
|
commitdiff
|
tree
2022-01-18
Luke Howard
k
d
c:
r
emove krb5_ pref
i
x for KDC attribute functions
commit
|
commitdiff
|
tree
2022-01-16
Jeffrey Alt
m
a
n
prev
e
nt
uninten
d
ed s
i
gn exten
s
ion
er
r
o
rs
commit
|
commitdiff
|
tree
2022-01-16
Jeffre
y
Altman
lib/hcrypto: ENGINE_by_dso do
n
ot leak
handle
commit
|
commitdiff
|
tree
2022-01-16
J
e
f
frey
A
ltman
rem
o
ve (krb5_e
n
ctype) cast
f
o
r
ETYPE_xxx
commit
|
commitdiff
|
tree
2022-01-16
J
e
ffrey Altman
kr
b
5
.
h: do no
t
use ano
n
ymous enum for alterna
t
e
E[NC
.
.
.
commit
|
commitdiff
|
tree
2022-01-16
Jef
f
rey
A
l
tman
gssap
i
/mech: m
e
ch_lo
c
l
.
h roken
.
h must be
included ear
l
ier
commit
|
commitdiff
|
tree
2022-01-14
Jeffre
y
Altma
n
r
o
ken: do not gl
o
bally def
i
ne 'timezon
e
' and 'tzname'
commit
|
commitdiff
|
tree
2022-01-13
Mar
c
Dionne
h
crypto: Fix return type f
o
r null_Ini
t
, null_Update
.
.
.
commit
|
commitdiff
|
tree
2022-01-03
Luke Howard
Wi
n
dows 10 SDK
b
u
i
ld fi
x
es
commit
|
commitdiff
|
tree
2022-01-01
Luke Howard
kdc: re
t
urn K
R
B5KDC_ERR_
C
_
PR
I
NCIPAL_UNKNOWN (PA)
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutton
k
rb5
:
C
h
eck asprintf r
e
t
urn
v
a
l
ue
commit
|
commitdiff
|
tree
2021-11-30
Nic
o
las
Willia
m
s
kr
b
5: Ma
k
e test_cc
r
un k
e
yctl n
e
w
_sessio
n
commit
|
commitdiff
|
tree
2021-11-30
Nicolas Willia
m
s
krb5: Make test_cc no
t
step on user ccaches
commit
|
commitdiff
|
tree
2021-11-30
Nic
o
las Williams
kr
b
5
: Fix FILE cc
a
che my_
b
asename() bug
commit
|
commitdiff
|
tree
2021-11-30
Nicolas
W
illiam
s
krb5: Fix umask i
s
s
u
e with SQLi
t
e3
commit
|
commitdiff
|
tree
2021-11-30
Nicol
a
s
Williams
sqlite:
B
e thr
e
ad
-
sa
f
e
o
n Windows too
commit
|
commitdiff
|
tree
2021-11-30
Nicolas Williams
sqlite: Use 0600
commit
|
commitdiff
|
tree
2021-11-30
Nic
o
l
a
s
W
illiams
roken: Use
p
tsname_r()
i
f we ha
v
e it
commit
|
commitdiff
|
tree
2021-11-30
Nico
l
as Williams
autoconf: Remove unused test
s
commit
|
commitdiff
|
tree
2021-11-30
Nicolas Wil
l
iams
k
rb5: Fix dox
y
gen comme
n
ts
commit
|
commitdiff
|
tree
2021-11-30
Nicolas Williams
base:
F
i
x
d
o
xygen comments
commit
|
commitdiff
|
tree
2021-11-29
R
oma
i
n Fihu
e
Revert "KCM wrong size memc
m
p"
commit
|
commitdiff
|
tree
2021-11-25
N
i
colas Wi
l
liams
Always perfo
r
m
=
= or
!= operation on cmp function
r
esult
commit
|
commitdiff
|
tree
2021-11-25
Jeffrey A
l
t
m
an
A
d
dres
s
GC
C
Bug 95
1
89 mem
c
mp wrongly st
r
i
p
p
ed like
.
.
.
commit
|
commitdiff
|
tree
2021-11-25
Jef
f
re
y
Altman
_gssapi_unwrap
_
i
o
v_arcfour r
e
move duplicate code block
commit
|
commitdiff
|
tree
2021-11-24
Andrew
B
artlett
kdc: Fix ‘head
e
r_key
’
ma
y
be u
s
ed
u
nin
i
t
ialize
d
in
.
.
.
commit
|
commitdiff
|
tree
2021-11-17
Qu
a
nah Gibson-Mo
u
nt
Fix #696 -
Find
p
y
th
o
n as part o
f
the config
u
re pr
o
cess
.
.
.
commit
|
commitdiff
|
tree
2021-11-17
J
effrey Altman
lib
/
a
s
n1
:
all exported functions must us
e
ASN1
C
ALL
.
.
.
commit
|
commitdiff
|
tree
2021-11-16
Je
f
frey Altman
asn1: u
s
e rok
e
n for generated sour
c
e files
commit
|
commitdiff
|
tree
2021-03-17
Lars
W
e
ndler
autoconf-2
.
7
0
fix
commit
|
commitdiff
|
tree
2020-11-06
du
n
c
a
n-mcewan
A
dd m
o
re test cases f
o
r i
s
sue #7
0
4
commit
|
commitdiff
|
tree
2020-11-06
dun
c
an-
m
ce
w
an
Fix i
n
c
o
rrec
t
pointer in
c
rement
commit
|
commitdiff
|
tree
2020-11-06
Jeffrey Altman
l
ib/krb5:
acc_re
s
o
l
ve_2
leak if ccErrCa
c
h
eNotFound
commit
|
commitdiff
|
tree
2020-11-06
Nicolas Williams
kr
b
5: Fi
x
API:
c
c
a
c
he failu
r
e
commit
|
commitdiff
|
tree
2020-07-24
Jeffrey Altm
a
n
hpropd:
enable keepalive
m
ode on
incoming socket
s
commit
|
commitdiff
|
tree
2020-07-24
Jeffrey Altman
kdc: enable keepalive mode on incoming so
c
ket
s
commit
|
commitdiff
|
tree
2020-07-24
J
e
ffrey Altman
kadmin: enable keepalive mod
e
on incoming sock
e
ts
commit
|
commitdiff
|
tree
2020-07-24
Jef
f
rey
Altman
roken: introduce rk_socket_set_ke
e
p
al
i
ve
commit
|
commitdiff
|
tree
2020-07-13
Jeffrey Al
t
man
asn1: functio
n
p
t
r
s
pass
e
d
a
s
ASN1CALL ptrs must be
.
.
.
commit
|
commitdiff
|
tree
2020-07-13
J
e
ffrey A
l
tman
asn
1
: c
o
de generators that lef
t
bit
shift
.
gt
.
31 mus
t
.
.
.
commit
|
commitdiff
|
tree
2020-06-29
J
effrey Altman
gssapi
/
krb5: del
e
te_s
e
c_context mus
t
close ccache
if
.
.
.
commit
|
commitdiff
|
tree
2020-06-29
Je
f
frey Al
t
man
hx509:
h
x509
_
context
_
free
do not
l
eak c
o
nfiguration
.
.
.
commit
|
commitdiff
|
tree
2020-06-29
Jeffrey Altman
krb5
:
krb5_fr
e
e_context unconditionally call hx509_contex
t
_fr
e
e
commit
|
commitdiff
|
tree
2020-06-29
Jeffre
y
Altman
base:
differentia
t
e KRB5 and other c
o
nfig
u
ration
s
on
.
.
.
commit
|
commitdiff
|
tree
2020-05-31
Earl
Ch
e
w
[
libedit/configure
.
ac] Refa
c
tor
tgetent mes
s
ag
e
to
.
.
.
commit
|
commitdiff
|
tree
2020-05-28
Andrew Bartlett
Squash
u
sing #if
0
a longsta
n
di
n
g
TODO t
o
avoid wa
r
nings
commit
|
commitdiff
|
tree
2020-05-28
Andrew
B
artle
t
t
Make rk_SOCK_IN
I
T an inline function a
n
d
chec
k
t
h
e
.
.
.
commit
|
commitdiff
|
tree
2020-05-28
Andre
w
B
artlett
Fix (del
i
ber
a
tel
y
) unused variable warning in rsa-ltm
.
c
commit
|
commitdiff
|
tree
2020-05-28
Nicolas Will
i
ams
kinit: Restore get_switch_
c
ach
e
beha
v
ior from 5bbe7c8dc
commit
|
commitdiff
|
tree
2020-05-28
Andrew Bartlett
Chec
k
some err
o
r
returns from *a
s
printf
(
)
commit
|
commitdiff
|
tree
2020-05-27
Jeffrey Altman
base: common_p
l
ugin
.
h a
d
d missing typedefs
commit
|
commitdiff
|
tree
2020-05-27
Je
f
fr
e
y
Altma
n
krb5: not_found
must fr
e
e k
r
b5_get_error_message st
r
i
n
g
commit
|
commitdiff
|
tree
2020-05-27
Jeffrey Altm
a
n
b
ase
:
heim_
c
onf_parse_file_m
u
lti remove
ext
r
a unu
s
ed
.
.
.
commit
|
commitdiff
|
tree
2020-05-26
Isa
a
c Boukris
Test incl
u
d
i
ng malformed kr
b
5
.
conf file
commit
|
commitdiff
|
tree
2020-05-26
Isaa
c
Boukris
Fix core dump hand
l
i
n
g i
n
t
ravis C
I
commit
|
commitdiff
|
tree
2020-03-08
Jef
f
rey Altman
kd
c
: kx509
.
c fix
b
u
ild failure
s
commit
|
commitdiff
|
tree
2020-02-11
I
s
a
ac Boukris
t
g
s-req: strip fo
r
wa
r
dab
l
e and p
r
oxiable if t
h
e
server
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Isaac Bo
u
kris
C
V
E
-2019-14870: Validate client
a
ttr
i
butes i
n
p
rotoco
l
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Isaac
B
oukris
CVE-20
1
9-14870: Apply
fo
r
wardable p
o
l
i
cy in proto
c
o
l
.
.
.
commit
|
commitdiff
|
tree
2019-12-10
Isaac
B
o
u
k
ris
CVE-2
0
1
9-14870:
Alway
s
lookup impersona
t
e
c
lient in
DB
commit
|
commitdiff
|
tree
2019-12-06
L
u
ke Howard
h
crypto: s
u
pport B
C
RYPT_
H
ASH_RE
U
SABLE_FLAG
commit
|
commitdiff
|
tree
2019-12-06
L
u
ke
Howard
roken: Window
s
ver
s
ion su
p
p
o
rt
h
elper
s
commit
|
commitdiff
|
tree
2019-06-21
Roland C
.
Dowdeswell
Fix b
u
ild for out-of-source
objdi
r
commit
|
commitdiff
|
tree
2019-06-21
Rolan
d
C
.
Dowdeswell
kdc: no
e
rror
i
f req is fwdable on
non-fwdab
l
e princ
commit
|
commitdiff
|
tree
2019-06-17
Roland C
.
Dowdes
w
ell
I
mpl
e
ment KRB5_TRACE using exist
i
n
g loggi
n
g fra
m
ework
commit
|
commitdiff
|
tree
2019-06-09
Jeff
r
ey Altman
Update SECURITY
.
md
commit
|
commitdiff
|
tree
2019-06-09
J
e
ffrey Altman
Crea
t
e SECURITY
.
md
commit
|
commitdiff
|
tree
2019-06-01
Isaac Boukris
Do n
o
t set a
n
onymo
u
s fla
g
in S4U2Proxy req
u
est
commit
|
commitdiff
|
tree
2019-05-31
Quanah G
i
b
s
on-Mount
Fixes #536 - Note t
h
at this c
a
n caus
e
unexpected behavior
.
.
.
commit
|
commitdiff
|
tree
2019-05-31
Quanah Gibso
n
-Mount
F
i
xes #53
2
- Note that
all does not includ
e
get-k
e
y
s
commit
|
commitdiff
|
tree
2019-05-31
Qua
n
ah Gibson-Mount
Fixes #55
0
-
Note that encrypt
is the
default
o
ption
commit
|
commitdiff
|
tree
2019-05-31
Quanah Gibson-Mo
u
nt
Fixes iss
u
e
#535
- v
e
rify-passw
o
rd-q
u
ality
commit
|
commitdiff
|
tree
2019-05-22
R
o
d Widdows
o
n
Windows: W
i
ndows CRT d
o
esn't
support
%
k
as format for
.
.
.
commit
|
commitdiff
|
tree
2019-05-22
Jeffrey
A
l
t
man
lib/krb5:
a
dd plugi
n
heade
r
s to Makefiles
commit
|
commitdiff
|
tree
2019-05-22
Jeffrey Altma
n
lib/krb5: prevent build f
a
ilures o
f
k
rb5_plugin
_
co
m
mon
.
.
.
commit
|
commitdiff
|
tree
2019-05-22
Jeff
r
ey
A
l
tman
li
b
/krb5: prepar
e
to ma
k
e common p
l
ugins publi
c
commit
|
commitdiff
|
tree
2019-05-22
J
effrey A
l
t
m
an
lib/k
r
b5:
common_plugin_ftable_desc funcs KRB5_LIB_C
A
LL
commit
|
commitdiff
|
tree
2019-05-22
J
e
ffr
e
y
A
lt
m
an
l
i
b
/
k
r
b
5: common plugi
n
on
l
y fall
b
ack
if load_fn()
.
.
.
commit
|
commitdiff
|
tree
2019-05-22
J
e
ffrey
Altman
lib/krb5: fix kr
b
5_get_instanc
e
_
func_t prototype
commit
|
commitdiff
|
tree
2019-05-22
Je
f
frey Altman
li
b
/krb
5
: krb5
.
h
m
issing KRB5_LIB_CALL defi
n
i
t
ion
commit
|
commitdiff
|
tree
2019-05-19
Luke Ho
w
a
rd
klist: di
s
p
l
ay
all kno
w
n flags when listing tickets
commit
|
commitdiff
|
tree
2019-05-19
L
u
ke Howard
krb5: s
e
t
PKINIT_BTMM fla
g
p
e
r Apple imp
l
eme
n
tation
commit
|
commitdiff
|
tree
2019-05-19
Luke Ho
w
ard
k
rb5: don't require krbtgt otherName match for
W
in2K
commit
|
commitdiff
|
tree
2019-05-19
Luke
Howard
kdc: use a
c
t
ual clien
t
p
r
inc for
K
RB5Si
g
nedPath
commit
|
commitdiff
|
tree
2019-05-19
Isaac
Boukris
kdc
:
allow checksum
of PA-FOR-USER
to
be H
M
AC_MD5
commit
|
commitdiff
|
tree
2019-05-19
Luke Howard
krb5:
c
heck K
D
C suppo
r
ts
a
nonymous if
r
eque
s
t
e
d
commit
|
commitdiff
|
tree
2019-05-18
Luke Howard
hcrypto-pkcs11: check mechanism
flags
commit
|
commitdiff
|
tree
2019-05-16
Jeffrey Al
t
ma
n
krb5_sendto_
k
dc
:
Windows n
o
KDC reach
a
ble error
commit
|
commitdiff
|
tree
2019-05-15
Dari
a
Phoebe Bra
s
hear
tests:
g
e
ner
a
te test_temp
l
ate_asn1-
t
emplate
.
c f
o
r testing
commit
|
commitdiff
|
tree
2019-05-14
L
u
ke Howard
k
rb5: always confi
r
m PA-PKI
N
IT-KX for anon
PKINIT
Signed-off-by: Jeffrey Altman <
jaltman@auristor.com
>
commit
|
commitdiff
|
tree
2019-05-14
Isa
a
c
Bo
u
k
r
i
s
CVE-2018-16860 Heimda
l
KDC: Reject
P
A-S
4
U
2
Self with
.
.
.
Reviewed-by: Jeffrey Altman <
jaltman@auristor.com
>
Signed-off-by: Jeffrey Altman <
jaltman@auristor.com
>
commit
|
commitdiff
|
tree
2019-05-14
Viktor Dukhovni
Wi
n
dows-compatible s
e
ntinel socket t
y
pe a
n
d
v
alue
commit
|
commitdiff
|
tree
next