Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: tlyu@mit.edu Subject: SVN Commit RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 818 Pull up r25590 from trunk ------------------------------------------------------------------------ r25590 | ghudson | 2011-12-16 18:18:54 -0500 (Fri, 16 Dec 2011) | 11 lines ticket: 7053 subject: Verify acceptor's mech in SPNEGO initiator target_version: 1.10 tags: pullup In spnego_gss_ctx_id_rec, store the set of negotiable mechanisms as well as the currently selected internal_mech, which becomes an alias into mech_set. In init_ctx_reselect, locate the acceptor's counter- proposal in sc->mech_set and consider the token defective if it is not found. https://github.com/krb5/krb5/commit/6bea7ee42984ab58ea7236ac7f49ae86723f85aa Commit By: tlyu Revision: 25627 Changed Files: U branches/krb5-1-10/src/lib/gssapi/spnego/gssapiP_spnego.h U branches/krb5-1-10/src/lib/gssapi/spnego/spnego_mech.c