aboutsummaryrefslogtreecommitdiff
path: root/src/lib
AgeCommit message (Expand)AuthorFilesLines
2015-12-02make dependTom Yu1-0/+12
2015-12-02Check output params on GSS OID set functionsTomas Kuthan1-0/+6
2015-12-02Fix gss_inquire_names_for_mech() on MS krb5 mechTomas Kuthan1-0/+1
2015-12-02Fix typo in GSS_S_UNAUTHORIZED error messageTomas Kuthan1-1/+1
2015-12-02Define error status GSS_S_BAD_MICTomas Kuthan1-0/+1
2015-12-02Fix error mappings for IOV MIC mechglue funcsTomas Kuthan2-6/+15
2015-11-25Fix SPNEGO context importGreg Hudson1-6/+27
2015-11-25Fix IAKERB context export/import [CVE-2015-2698]Greg Hudson3-8/+41
2015-11-25Fix two IAKERB commentsGreg Hudson1-5/+1
2015-11-25Fix build_principal memory bug [CVE-2015-2697]Greg Hudson1-4/+2
2015-11-25Fix IAKERB context aliasing bugs [CVE-2015-2696]Nicolas Williams3-41/+529
2015-11-25Fix mechglue gss_acquire_cred_impersonate_nameSimo Sorce1-1/+1
2015-11-25Fix SPNEGO context aliasing bugs [CVE-2015-2695]Nicolas Williams2-64/+192
2015-09-16Fix krb5_rd_req() memory leakNicolas Williams1-0/+1
2015-09-16Fix error handling in gss_export_sec_context()Nicolas Williams1-13/+17
2015-09-16Check for null name_type in gss_display_name_extSolly Ross1-1/+3
2015-08-18Fix gss_inquire_name() name_is_MN resultIsaac Boukris1-1/+1
2015-08-18Do not allow stream socket retries in libkradNathaniel McCallum1-0/+3
2015-08-18Fix uncommon leak in krb5_init_creds_step()Greg Hudson1-0/+2
2015-08-18Fix leak in gss_acquire_cred_with_passwordGreg Hudson1-0/+3
2015-06-24Tolerate null oid pointer in gss_release_oid()Greg Hudson1-1/+1
2015-06-24Fix bindresvport_sa port byte swap bugGreg Hudson1-1/+1
2015-06-24Make registry hostrealm module highest precedenceBen Kaduk1-4/+4
2015-05-13Supply a hostrealm module to query the registryBen Kaduk4-0/+145
2015-05-13Fix loop to determine MSLSA principal nameBen Kaduk1-4/+4
2015-05-13Avoid unneeded GetMSTGT() calls in cc_mslsa.cBen Kaduk1-33/+29
2015-05-13Move realm conversion into helper in cc_mslsa.cBen Kaduk1-11/+13
2015-05-13Rename cc_mslsa.c routines to avoid OS versionsBen Kaduk1-17/+21
2015-05-13Remove unused code from cc_mslsa.cBen Kaduk1-108/+0
2015-05-13comment some future cleanup for cc_mslsa.cBen Kaduk1-0/+5
2015-05-13Remove old Windows support from cc_mslsa.cBen Kaduk1-537/+66
2015-04-16Disable principal renames for LDAPGreg Hudson1-0/+13
2015-03-18Log invalid restrictions stringsGreg Hudson1-0/+4
2015-03-18Fix scope of kadmind ACL wildcard back-referencesGreg Hudson1-1/+1
2015-03-18Import names immediately with COMPOSITE_EXPORTSolly Ross1-7/+8
2015-03-02Fix krb5_read_message handling [CVE-2014-5355]Greg Hudson1-3/+6
2015-02-04Fix gssrpc data leakage [CVE-2014-9423]Greg Hudson2-24/+2
2015-02-04Fix kadm5/gssrpc XDR double free [CVE-2014-9421]Greg Hudson2-1/+2
2015-02-04Fix gss_process_context_token() [CVE-2014-5352]Greg Hudson13-13/+35
2015-01-24Do not loop on principal unknown errorsSimo Sorce1-27/+13
2015-01-24Export function gss_add_cred_with_passwordRobbie Harwood (frozencemetery)1-0/+1
2014-12-16Avoid infinite loop on duplicate keysaltsBen Kaduk1-11/+10
2014-12-16Fix cursor leak in krb5_verify_init_credsGreg Hudson1-2/+6
2014-12-16Report output ccache errors getting initial credsGreg Hudson1-1/+0
2014-12-16Use gssalloc_malloc for GSS error tokensGreg Hudson1-1/+1
2014-09-22Return only new keys in randkey [CVE-2014-5351]Greg Hudson1-3/+18
2014-09-22Fix krb5 gss_acquire_cred_impersonate_name crashGreg Hudson1-2/+8
2014-09-18Work around replay cache creation raceGreg Hudson1-4/+8
2014-09-12Let libgssapi see TGTs in the MSLSA cacheBen Kaduk1-2/+3
2014-09-12Try to scan_ccache() after leash picks a cacheBen Kaduk1-1/+2