[Heimdal-source-changes] [heimdal/heimdal] 1611ac: krb5: allow NULL authenticator in krb5_auth_con_fr...

[Luke Howard]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 1611ac457fc9a89e39728a8b486a6633cda08b15
      https://github.com/heimdal/heimdal/commit/1611ac457fc9a89e39728a8b486a6633cda08b15
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-15 (Wed, 15 Apr 2020)

  Changed paths:
    M lib/krb5/auth_context.c

  Log Message:
  -----------
  krb5: allow NULL authenticator in krb5_auth_con_free()

When freeing an auth context, allow the authenticator to be NULL. Useful for
freeing partially allocated authentication context.


  Commit: b2eb5b0edf24f93b76671dad3dde7f0a81f18555
      https://github.com/heimdal/heimdal/commit/b2eb5b0edf24f93b76671dad3dde7f0a81f18555
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-15 (Wed, 15 Apr 2020)

  Changed paths:
    M lib/gssapi/mech/gss_utils.c
    M lib/gssapi/mech/utils.h

  Log Message:
  -----------
  gss: add _gss_secure_release_buffer()

Add _gss_secure_release_buffer() helper function that zeros buffer


  Commit: 689eef20eccc74c9fbe4ecc267da88e530bcd317
      https://github.com/heimdal/heimdal/commit/689eef20eccc74c9fbe4ecc267da88e530bcd317
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-15 (Wed, 15 Apr 2020)

  Changed paths:
    M lib/gssapi/mech/gss_utils.c
    M lib/gssapi/mech/utils.h

  Log Message:
  -----------
  gss: add _gss_secure_release_buffer_set()

Add _gss_secure_release_buffer_set() helper function for zeroing buffer set
contents before release.


  Commit: 2c8fa272240f17e4d9d801abad9710c6c09f63ab
      https://github.com/heimdal/heimdal/commit/2c8fa272240f17e4d9d801abad9710c6c09f63ab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-15 (Wed, 15 Apr 2020)

  Changed paths:
    M lib/gssapi/krb5/export_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/mech/gss_cred.c
    M lib/gssapi/mech/gss_duplicate_cred.c
    M lib/gssapi/mech/gss_export_sec_context.c
    M lib/gssapi/mech/gss_inquire_cred_by_oid.c
    M lib/gssapi/mech/gss_krb5.c
    M lib/gssapi/spnego/negoex_ctx.c

  Log Message:
  -----------
  gss: use _gss_secure_release_buffer_[set]

Use new helper APIs for securely zeroing and releasing buffers and buffer sets.


Compare: https://github.com/heimdal/heimdal/compare/d2880425e559...2c8fa272240f