[Heimdal-source-changes] [heimdal/heimdal] 29fe69: gssapi: fix dlsym() return value casting

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 29fe69f95f53a067bae76c265945e5a3afcdd3ef
      https://github.com/heimdal/heimdal/commit/29fe69f95f53a067bae76c265945e5a3afcdd3ef
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-03 (Thu, 03 Jan 2019)

  Changed paths:
    M lib/gssapi/gssapi_mech.h
    M lib/gssapi/mech/gss_mech_switch.c

  Log Message:
  -----------
  gssapi: fix dlsym() return value casting

Fix warnings on Windows (and possibly other platforms) but appropriately
casting the return value of dlsym().


  Commit: ad426d038576d05a6d1f4420978862802f79dbfd
      https://github.com/heimdal/heimdal/commit/ad426d038576d05a6d1f4420978862802f79dbfd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-03 (Thu, 03 Jan 2019)

  Changed paths:
    M lib/gssapi/mech/gss_compare_name.c
    M lib/gssapi/mech/gss_cred.c
    M lib/gssapi/mech/gss_destroy_cred.c
    M lib/gssapi/mech/gss_export_sec_context.c
    M lib/gssapi/mech/gss_import_name.c
    M lib/gssapi/mech/gss_indicate_mechs.c
    M lib/gssapi/mech/gss_inquire_context.c
    M lib/gssapi/mech/gss_inquire_cred.c
    M lib/gssapi/mech/gss_inquire_cred_by_mech.c
    M lib/gssapi/mech/gss_inquire_cred_by_oid.c
    M lib/gssapi/mech/gss_krb5.c
    M lib/gssapi/mech/gss_unwrap.c
    M lib/gssapi/mech/gss_utils.c

  Log Message:
  -----------
  gssapi: import bugfixes from Apple Heimdal-520

* check `ctx->gc_ctx` in `gss_inquire_context()`
* check `gm_inquire_cred != NULL` in `gss_inquire_context()`
* check `min_lifetime` in `gss_inquire_cred()`
* check `gm_inquire_cred_by_mech != NULL` in `gss_inquire_cred_by_mech()`
* set mech error in `gss_inquire_cred_by_oid()`
* don't clobber error in `gss_inquire_cred_by_oid()`
* don't pass NULL minor_status to `gss_krb5_free_lucid_sec_context()`
* allow NULL ccache in `gss_krb5_ccache_name()`
* NULL names OK in `_gss_find_mn()`
* allow empty names in `gss_import_name()` (removes `input_name_buffer` length
  check). to support ANONYMOUS.  in `gss_import_name()`, ignore mech name
  import failure as long as it's possible to import the name in some other
  mechanism
* better argument validation in `gss_export_sec_context()`
* in `gss_compare_name()`, check `mn2 != NULL`
* check `gss_add_oid_set_member()` return code in `gss_indicate_mechs()`
* in `gss_destroy_cred()`, set output cred handle to `GSS_C_NO_CREDENTIAL`
* cast size_t to OM_uint32 where required


  Commit: 728650f3ddb6c922c6d079485781aabab6fdefa6
      https://github.com/heimdal/heimdal/commit/728650f3ddb6c922c6d079485781aabab6fdefa6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-03 (Thu, 03 Jan 2019)

  Changed paths:
    M lib/gssapi/gssapi_mech.h
    M lib/gssapi/mech/gss_accept_sec_context.c
    M lib/gssapi/mech/gss_mech_switch.c

  Log Message:
  -----------
  gssapi: canonicalize mech OID in gss_accept_sec_context()


  Commit: 2242b5bc5b3ac4e5c7b7f324e069ab638814f4a8
      https://github.com/heimdal/heimdal/commit/2242b5bc5b3ac4e5c7b7f324e069ab638814f4a8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-03 (Thu, 03 Jan 2019)

  Changed paths:
    M lib/gssapi/krb5/set_cred_option.c
    M lib/gssapi/mech/gss_krb5.c

  Log Message:
  -----------
  gssapi: gss_krb5_set_allowable_enctypes prototype mismatch

gss_krb5_set_allowable_enctypes() was declared with an array of int32_t types
representing the enctype list, but the definition had an array of krb5_enctype.
Whilst these are likely the same size, they may not be. On the receiving end,
allocate an array of krb5_enctype.


Compare: https://github.com/heimdal/heimdal/compare/f17e48f61323...2242b5bc5b3a
      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.