[17130] in Kerberos-V5-bugs
[krbdev.mit.edu #9214] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Aug 31 22:47:49 2026
From: "Greg Hudson via RT" <rt@krbdev.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.3-2-2621717-1788230865-1685.9214-5-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9214":;
Date: Mon, 31 Aug 2026 22:47:45 -0400
MIME-Version: 1.0
Reply-To: rt@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9214 >
Fix gss_add_cred() extension fallback path
In copy_mech_cred(), if we fall back to using the mechanism's
gss_inquire_cred() and gss_acquire_cred(), correctly release the
mechanism name, and map the minor status if a mechanism call fails.
Reported by Daniel Sands.
This helper function is only reached if an application calls
gss_add_cred() with non-null input_cred_handle and output_cred_handle.
It was introduced in commit 288cbada833dc6af7d43dd308563b48b73347dfb
(ticket 8734).
(cherry picked from commit d4c96c2279855b2064ebef192434382118d101e8)
https://github.com/krb5/krb5/commit/e4d263f9e22221d7354631bcbbd0e27fae8515bd
Author: Greg Hudson <ghudson@mit.edu>
Commit: e4d263f9e22221d7354631bcbbd0e27fae8515bd
Branch: krb5-1.22
src/lib/gssapi/mechglue/g_acquire_cred.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
