Return-Path: Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90]) by krbdev.mit.edu (Postfix) with ESMTP id E6E863E64C; Thu, 21 Oct 2010 15:19:08 -0400 (EDT) Received: from pch.mit.edu (pch.mit.edu [127.0.0.1]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id o9LJJ8E9026803; Thu, 21 Oct 2010 15:19:08 -0400 Received: from mailhub-dmz-2.mit.edu (MAILHUB-DMZ-2.MIT.EDU [18.7.62.37]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id o9LJEtb6026308 for ; Thu, 21 Oct 2010 15:14:55 -0400 Received: from dmz-mailsec-scanner-6.mit.edu (DMZ-MAILSEC-SCANNER-6.MIT.EDU [18.7.68.35]) by mailhub-dmz-2.mit.edu (8.13.8/8.9.2) with ESMTP id o9LJEYxk027944 for ; Thu, 21 Oct 2010 15:14:55 -0400 X-Auditid: 12074423-b7bd0ae000000a00-7b-4cc0912e20a6 Received: from sh12.exchange.ms ( [64.71.238.98]) by dmz-mailsec-scanner-6.mit.edu (Symantec Brightmail Gateway) with SMTP id 2D.CA.02560.E2190CC4; Thu, 21 Oct 2010 15:14:54 -0400 (EDT) Received: from outbound.mse3.exchange.ms (unknown [10.0.25.203]) by sh12.exchange.ms (Postfix) with ESMTP id 89834AC61A for ; Thu, 21 Oct 2010 15:12:02 -0400 (EDT) X-Mimeole: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Subject: gss_krb5int_make_seal_token_v3_iov fails to set conf_state Date: Thu, 21 Oct 2010 15:14:37 -0400 Message-ID: <23447137FA0DAA4D95EF535FF356BE460566CDFA@mse3be2.mse3.exchange.ms> X-MS-Has-Attach: X-MS-Tnef-Correlator: Thread-Topic: gss_krb5int_make_seal_token_v3_iov fails to set conf_state Thread-Index: ActxVDQOIHrayRTQSB+QiHIkjbLCkA== From: "Arlene Berry" To: X-Mailstreet-Mailscanner-ID: 89834AC61A.52921 X-Mailstreet-Mailscanner: Found to be clean X-Brightmail-Tracker: AAAAAA== Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by pch.mit.edu id o9LJEtb6026308 X-Mailman-Approved-At: Thu, 21 Oct 2010 15:19:07 -0400 X-Beenthere: krb5-bugs-incoming@mailman.mit.edu X-Mailman-Version: 2.1.6 Precedence: list Sender: krb5-bugs-incoming-bounces@PCH.mit.edu Errors-To: krb5-bugs-incoming-bounces@PCH.mit.edu X-RT-Original-Encoding: us-ascii Content-Length: 540 gss_krb5int_make_seal_token_v3_iov fails to set conf_state which results in gss_wrap_iov returning an incorrect value. This fixed it for us: Index: src/lib/gssapi/krb5/k5sealv3iov.c =================================================================== --- src/lib/gssapi/krb5/k5sealv3iov.c (revision 24468) +++ src/lib/gssapi/krb5/k5sealv3iov.c (working copy) @@ -269,6 +269,9 @@ code = 0; + if (conf_state != NULL) + *conf_state = conf_req_flag; + cleanup: if (code != 0) kg_release_iov(iov, iov_count);