SHA256
1
0
forked from pool/krb5
Dominique Leuenberger 2020-05-19 12:43:09 +00:00 committed by Git OBS Bridge
commit bb6082deee
9 changed files with 58 additions and 67 deletions

View File

@ -1,43 +0,0 @@
From 96d0ee0760a1c7cf735d04fbddf095a4c01ef190 Mon Sep 17 00:00:00 2001
From: Greg Hudson <ghudson@mit.edu>
Date: Tue, 3 Mar 2020 12:27:02 -0500
Subject: [PATCH] Fix null dereference qualifying short hostnames
Fix the dnsglue.c PRIMARY_DOMAIN macro not to call strdup() with a
null pointer if no DNS search path is configured.
ticket: 8881
tags: pullup
target_version: 1.18-next
(cherry picked from commit cd82bf377e7fad2409c76bf8b241920692f34fda)
---
src/lib/krb5/os/dnsglue.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/src/lib/krb5/os/dnsglue.c b/src/lib/krb5/os/dnsglue.c
index e35ca9d76..0cd213fdd 100644
--- a/src/lib/krb5/os/dnsglue.c
+++ b/src/lib/krb5/os/dnsglue.c
@@ -91,7 +91,7 @@ static int initparse(struct krb5int_dns_state *);
#define DECLARE_HANDLE(h) struct __res_state h
#define INIT_HANDLE(h) (memset(&h, 0, sizeof(h)), res_ninit(&h) == 0)
#define SEARCH(h, n, c, t, a, l) res_nsearch(&h, n, c, t, a, l)
-#define PRIMARY_DOMAIN(h) strdup(h.dnsrch[0])
+#define PRIMARY_DOMAIN(h) ((h.dnsrch[0] == NULL) ? NULL : strdup(h.dnsrch[0]))
#if HAVE_RES_NDESTROY
#define DESTROY_HANDLE(h) res_ndestroy(&h)
#else
@@ -104,7 +104,8 @@ static int initparse(struct krb5int_dns_state *);
#define DECLARE_HANDLE(h)
#define INIT_HANDLE(h) (res_init() == 0)
#define SEARCH(h, n, c, t, a, l) res_search(n, c, t, a, l)
-#define PRIMARY_DOMAIN(h) strdup(_res.defdname)
+#define PRIMARY_DOMAIN(h) \
+ ((_res.defdname == NULL) ? NULL : strdup(_res.defdname))
#define DESTROY_HANDLE(h)
#endif
--
2.25.1

3
krb5-1.18.1.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:02a4e700f10936f937cd1a4c303cab8687a11abecc6107bd4b706b9329cd5400
size 8711772

17
krb5-1.18.1.tar.gz.asc Normal file
View File

@ -0,0 +1,17 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=VRAC
-----END PGP SIGNATURE-----

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:73913934d711dcf9d5f5605803578edb44b9a11786df3c1b2711f4e1752f2c88
size 8706395

View File

@ -1,17 +0,0 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jxUB
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Mon May 4 09:24:21 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
- Upgrade to 1.18.1
* Fix a crash when qualifying short hostnames when the system has
no primary DNS domain.
* Fix a regression when an application imports "service@" as a GSS
host-based name for its acceptor credential handle.
* Fix KDC enforcement of auth indicators when they are modified by
the KDB module.
* Fix removal of require_auth string attributes when the LDAP KDB
module is used.
* Fix a compile error when building with musl libc on Linux.
* Fix a compile error when building with gcc 4.x.
* Change the KDC constrained delegation precedence order for consistency
with Windows KDCs.
- Remove 0009-Fix-null-dereference-qualifying-short-hostnames.patch
-------------------------------------------------------------------
Wed Apr 29 08:06:31 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>

View File

@ -24,7 +24,7 @@
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: krb5-mini
Version: 1.18
Version: 1.18.1
Release: 0
Summary: MIT Kerberos5 implementation and libraries with minimal dependencies
License: MIT
@ -44,7 +44,6 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch
Patch6: 0006-krb5-1.12-api.patch
Patch7: 0007-SELinux-integration.patch
Patch8: 0008-krb5-1.9-debuginfo.patch
Patch9: 0009-Fix-null-dereference-qualifying-short-hostnames.patch
BuildRequires: autoconf
BuildRequires: bison
BuildRequires: keyutils

View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Mon May 4 09:24:21 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
- Upgrade to 1.18.1
* Fix a crash when qualifying short hostnames when the system has
no primary DNS domain.
* Fix a regression when an application imports "service@" as a GSS
host-based name for its acceptor credential handle.
* Fix KDC enforcement of auth indicators when they are modified by
the KDB module.
* Fix removal of require_auth string attributes when the LDAP KDB
module is used.
* Fix a compile error when building with musl libc on Linux.
* Fix a compile error when building with gcc 4.x.
* Change the KDC constrained delegation precedence order for consistency
with Windows KDCs.
- Remove 0009-Fix-null-dereference-qualifying-short-hostnames.patch
-------------------------------------------------------------------
Wed Apr 29 08:04:32 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>

View File

@ -21,7 +21,7 @@
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: krb5
Version: 1.18
Version: 1.18.1
Release: 0
Summary: MIT Kerberos5 implementation
License: MIT
@ -42,7 +42,6 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch
Patch6: 0006-krb5-1.12-api.patch
Patch7: 0007-SELinux-integration.patch
Patch8: 0008-krb5-1.9-debuginfo.patch
Patch9: 0009-Fix-null-dereference-qualifying-short-hostnames.patch
BuildRequires: autoconf
BuildRequires: bison
BuildRequires: keyutils