GitHub PushEvent at 2014-05-07 18:39:52
Repository: krb5
Actor: greghudson
Payload: {"shas":[["59c8600dcbee09dd9b4bf68b9b97c6fa95e9f6d2","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Add helper to change extended error message code\n\nk5_change_error_message_code allows an extended error message to be\nused when an error code is remapped.","Greg Hudson",false],["035eb79b3f250b690502c66aaf664410b1d0e7e0","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Use k5_change_error_message_code in krb5 GSS mech\n\nSimplify acquire_accept_cred using the new helper function.","Greg Hudson",false],["eba8c4909ec7ba0d7054d5d1b1061319e9970cc7","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Improve krb5_rd_req decryption failure errors\n\nWhen krb5_rd_req cannot decrypt a ticket, try to produce the most\nhelpful diagnostic we can, and return an error code which corresponds\nto the most applicable Kerberos protocol error.  Add a trace log\ncontaining the error message for ticket decryption failures, in case\nthe application server does not log it.\n\nAdd new tests to cover krb5_rd_req error messages and adjust existing\ntests to match the new messages.  Also adjust svc_auth_gssapi.c to\nlook for KRB5KRB_AP_ERR_NOT_US instead of KRB5KRB_AP_WRONG_PRINC.\n\nticket: 7232","Greg Hudson",false],["7783054742ddd807f7b2f7157d6ed81b7fb614eb","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Don't remove ccache creds before storing them\n\nRevert #6291, which attempts to suppress duplicate credentials by\ncalling krb5_cc_remove in krb5_cc_store_cred.  Most of our ccache\ntypes don't implement remove_cred, and avoiding duplicate credentials\nis a responsibility better suited to the ccache implementation for\natomicity reasons.\n\nRemoving this call gets rid of the misleading \"Removing ... from ...\"\nmessages in trace logs.\n\nticket: 7906 (new)","Greg Hudson",false],["0477f69ba67e7071cb3671f94c466ba99f15285e","82f9e1ed721fcccea63e731937aebbed0eb2ac10@yahoo.com","Fix unlikely memory leak exporting lucid context\n\nIf the GSSAPI context has an unrecognized proto field (which should\nnever happen), free the context we allocated before returning EINVAL.\n\n[ghudson@mit.edu: clarify commit message]","Neng Xue",false],["d55682dbdc8b80cd7c8ba0c45a78b540f04c0ca3","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Add k5_buf_get_space\n\nAdd a new k5_buf method to make room in the buffer for the caller to\nfill in.","Greg Hudson",true],["c6aabfecbf55d06285a01bf5e5c971f2ff6bd09a","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Add k5-input.h\n\nAdd a header containing a declaration for struct k5input and static\ninline functions to use it.  A k5input structure can be used to safely\nextract bytes and integers from a fixed-sized input buffer without\noverrunning the buffer.  It supports deferred error checking (similar\nto k5buf) by returning dummy values and storing a status value in the\ninput structure.","Greg Hudson",true],["83c67de345915bb84319f5dcadd5d428bc31bf4b","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Add cred marshalling functions\n\nAdd a new file ccmarshal.c containing functions to marshal and\nunmarshal credentials in file formats version 1-4.  These will replace\nthe functions in cc_file.c and cc_keyring.c, and can be used for KCM\nin the future.","Greg Hudson",true],["33c8f61c470ec965927d0150134376440ebf1281","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Add ccache marshalling tests\n\nAdd a new ccache test program t_marshal.c which verifies the new\nmarshalling functions and also the FILE ccache type against the\nexpected representations of the ccache header, default principal, and\ncredentials.","Greg Hudson",true],["5abb81eca08594b8caa44439095b50746c2fa906","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Modernize cc_file.c and cc_keyring.c\n\nRename functions not to use the krb5_ prefix, and to use the fcc_ or\nkrcc_ prefixes only for ccache method implementations.  Use shorter\nfunction comments and add missing comments in some cases.  Remove\nforward declarations where they aren't needed.  Use native types\n(uint16_t, void *, etc.) in preference to Kerberos type wrappers.  Use\n\"ret\" as the variable name for krb5_error_code return values.  Use 0\ninstead of KRB5_OK.  Make whitespace conform to current practice.\nRemove old #if 0 blocks.  Don't cast to and from void * or between\ninteger types when C guarantees an implicit cast.  Use literal 2 and 4\nfor the size of fixed-width 16-bit and 32-bit types.\n\nIn cc_file.c, rewrite the header comment to fully specify the file\nformat and update it to include all of the changes in versions 2-4.\nAlso add a helper function to return the cache version as an integer\nfrom 1 to 4, allowing more concise version checks.","Greg Hudson",true],["0cfb2c47172a13a5b21c0310ece2ecb4e4a2f38d","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Use cred marshalling functions in cc_file.c\n\nReplace the cc_file.c credential and principal marshalling and\nunmarshalling functions with calls to the ccmarshal.c functions.  For\nunmarshalling, we still need code to read the appropriate amount of\ndata into a memory buffer.  Because there is no outer length header\nfor principals and credentials, this code needs to understand the\ncredential and principal representations, but is much simpler than the\nold code as it only needs to store the data it reads, not assemble a\ndata structure.","Greg Hudson",true],["9df6734ff5816fc6cabce720d8a863ec3e51040b","5365cf2218f6cd43be3aaf2d94134e9b8e7d0479@mit.edu","Use cred marshalling functions in cc_keyring.c\n\nReplace the cc_keyring.c credential and principal marshalling\nfunctions with calls to the ccmarshal.c functions.  Simplify the\nremaining parsing functions (for the index and time offsets) and fold\nthe resulting code into the calling functions where appropriate.","Greg Hudson",true]],"size":12,"ref":"refs/heads/ccmarshal","head":"9df6734ff5816fc6cabce720d8a863ec3e51040b"}