Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gssntlmssp for openSUSE:Factory checked in at 2026-09-18 22:08:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gssntlmssp (Old) and /work/SRC/openSUSE:Factory/.gssntlmssp.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gssntlmssp" Fri Sep 18 22:08:41 2026 rev:4 rq:1378833 version:1.3.2 Changes: -------- --- /work/SRC/openSUSE:Factory/gssntlmssp/gssntlmssp.changes 2026-04-16 17:26:13.097575700 +0200 +++ /work/SRC/openSUSE:Factory/.gssntlmssp.new.383539/gssntlmssp.changes 2026-09-18 22:09:12.225295377 +0200 @@ -1,0 +2,7 @@ +Thu Sep 17 06:57:19 UTC 2026 - Martin Hauke <[email protected]> + +- Update to version 1.3.2 + * Detect strerror_r return type at configure time. + * Ensure we only free the context when allocated. + +------------------------------------------------------------------- Old: ---- gssntlmssp-1.3.1.tar.gz New: ---- gssntlmssp-1.3.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gssntlmssp.spec ++++++ --- /var/tmp/diff_new_pack.2XkdVN/_old 2026-09-18 22:09:12.833320859 +0200 +++ /var/tmp/diff_new_pack.2XkdVN/_new 2026-09-18 22:09:12.836320985 +0200 @@ -17,7 +17,7 @@ Name: gssntlmssp -Version: 1.3.1 +Version: 1.3.2 Release: 0 Summary: GSSAPI NTLMSSP Mechanism License: ISC ++++++ gssntlmssp-1.3.1.tar.gz -> gssntlmssp-1.3.2.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/.github/workflows/ccpp.yml new/gss-ntlmssp-1.3.2/.github/workflows/ccpp.yml --- old/gss-ntlmssp-1.3.1/.github/workflows/ccpp.yml 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/.github/workflows/ccpp.yml 2026-09-16 23:39:23.000000000 +0200 @@ -42,7 +42,7 @@ elif command -v pacman; then pacman -Sy --noconfirm automake autoconf docbook-xml docbook-xsl doxygen libtool libxslt gcc libxml2 m4 make zlib fi - - uses: actions/checkout@v3 + - uses: actions/checkout@v6 - name: autoreconf run: autoreconf -fi - name: configure @@ -57,7 +57,7 @@ - name: make check run: make check - name: Upload logs - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 if: failure() with: name: testlogs ${{ matrix.container }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/configure.ac new/gss-ntlmssp-1.3.2/configure.ac --- old/gss-ntlmssp-1.3.1/configure.ac 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/configure.ac 2026-09-16 23:39:23.000000000 +0200 @@ -34,6 +34,7 @@ AC_CONFIG_HEADER(config.h) AC_CHECK_TYPES([errno_t], [], [], [[#include <errno.h>]]) +AC_FUNC_STRERROR_R m4_include([build_macros.m4]) BUILD_WITH_SHARED_BUILD_DIR diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/po/LINGUAS new/gss-ntlmssp-1.3.2/po/LINGUAS --- old/gss-ntlmssp-1.3.1/po/LINGUAS 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/po/LINGUAS 2026-09-16 23:39:23.000000000 +0200 @@ -1,3 +1,6 @@ en_GB ko ka +tr +zh_Hant +id diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/po/id.po new/gss-ntlmssp-1.3.2/po/id.po --- old/gss-ntlmssp-1.3.1/po/id.po 1970-01-01 01:00:00.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/po/id.po 2026-09-16 23:39:23.000000000 +0200 @@ -0,0 +1,169 @@ +# GSS-NTLMSSP Translation Template file. +# Copyright (C) 2015 Simo Sorce <[email protected]> +# This file is distributed under the same license as the gssntlmssp package. +# Simo Sorce <[email protected]>, 2015. +# Arif Budiman <[email protected]>, 2026. +msgid "" +msgstr "" +"Project-Id-Version: gssntlmssp 0.5.0\n" +"Report-Msgid-Bugs-To: [email protected]\n" +"POT-Creation-Date: 2015-02-20 09:49-0500\n" +"PO-Revision-Date: 2026-03-30 04:58+0000\n" +"Last-Translator: Arif Budiman <[email protected]>\n" +"Language-Team: Indonesian <https://translate.fedoraproject.org/projects/gss-"; +"ntlmssp/master/id/>\n" +"Language: id\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Generator: Weblate 5.16.2\n" + +#: src/gss_err.c:24 +msgid "Unknown Error" +msgstr "Kesalahan Tidak Dikenal" + +#. ERR_DECODE +#: src/gss_err.c:25 +msgid "Failed to decode data" +msgstr "Gagal mendekode data" + +#. ERR_ENCODE +#: src/gss_err.c:26 +msgid "Failed to encode data" +msgstr "Gagal mengenkode data" + +#. ERR_CRYPTO +#: src/gss_err.c:27 +msgid "Crypto routine failure" +msgstr "Kegagalan rutinitas kripto" + +#. ERR_NOARG +#: src/gss_err.c:28 +msgid "A required argument is missing" +msgstr "Argumen yang diperlukan hilang" + +#. ERR_BADARG +#: src/gss_err.c:29 +msgid "Invalid value in argument" +msgstr "Nilai tidak valid dalam argumen" + +#. ERR_NONAME +#: src/gss_err.c:30 +msgid "Name is empty" +msgstr "Nama kosong" + +#. ERR_NOSRVNAME +#: src/gss_err.c:31 +msgid "Not a server name" +msgstr "Bukan nama server" + +#. ERR_NOUSRNAME +#: src/gss_err.c:32 +msgid "Not a user name" +msgstr "Bukan nama pengguna" + +#. ERR_BADLMLEVEL +#: src/gss_err.c:33 +msgid "Bad LM compatibility Level" +msgstr "Tingkat kompatibilitas LM buruk" + +#. ERR_IMPOSSIBLE +#: src/gss_err.c:34 +msgid "An impossible error occurred" +msgstr "Terjadi kesalahan yang mustahil" + +#. ERR_BADCTX +#: src/gss_err.c:35 +msgid "Invalid or incomplete context" +msgstr "Konteks tidak valid atau tidak lengkap" + +#. ERR_WRONGCTX +#: src/gss_err.c:36 +msgid "Wrong context type" +msgstr "Jenis konteks salah" + +#. ERR_WRONGMSG +#: src/gss_err.c:37 +msgid "Wrong message type" +msgstr "Jenis pesan salah" + +#. ERR_REQNEGFLAG +#: src/gss_err.c:38 +msgid "A required Negotiate flag was not provided" +msgstr "Bendera Negosiasi yang diperlukan tidak disediakan" + +#. ERR_FAILNEGFLAGS +#: src/gss_err.c:39 +msgid "Failed to negotiate a common set of flags" +msgstr "Gagal menegosiasikan satu set bendera yang sama" + +#. ERR_BADNEGFLAGS +#: src/gss_err.c:40 +msgid "Invalid combinations of negotiate flags" +msgstr "Kombinasi bendera negosiasi tidak valid" + +#. ERR_NOSRVCRED +#: src/gss_err.c:41 +msgid "Not a server credential type" +msgstr "Bukan jenis kredensial server" + +#. ERR_NOUSRCRED +#: src/gss_err.c:42 +msgid "Not a user credential type" +msgstr "Bukan jenis kredensial pengguna" + +#. ERR_BADCRED +#: src/gss_err.c:43 +msgid "Invalid or unknown credential" +msgstr "Kredensial tidak valid atau tidak dikenal" + +#. ERR_NOTOKEN +#: src/gss_err.c:44 +msgid "Empty or missing token" +msgstr "Token kosong atau hilang" + +#. ERR_NOTSUPPORTED +#: src/gss_err.c:45 +msgid "Feature not supported" +msgstr "Fitur tidak didukung" + +#. ERR_NOTAVAIL +#: src/gss_err.c:46 +msgid "Feature not available" +msgstr "Fitur tidak tersedia" + +#. ERR_NAMETOOLONG +#: src/gss_err.c:47 +msgid "Name is too long" +msgstr "Nama terlalu panjang" + +#. ERR_NOBINDINGS +#: src/gss_err.c:48 +msgid "Required channel bingings are not available" +msgstr "Channel binding yang diperlukan tidak tersedia" + +#. ERR_TIMESKEW +#: src/gss_err.c:49 +msgid "Server and client clocks are too far apart" +msgstr "Jam server dan klien terlalu jauh berbeda" + +#. ERR_EXPIRED +#: src/gss_err.c:50 +msgid "Expired" +msgstr "Kedaluwarsa" + +#. ERR_KEYLEN +#: src/gss_err.c:51 +msgid "Invalid key length" +msgstr "Panjang kunci tidak valid" + +#. ERR_NONTLMV1 +#: src/gss_err.c:52 +msgid "NTLM version 1 not allowed" +msgstr "Versi NTLM 1 tidak diizinkan" + +#. ERR_NOUSRFOUND +#: src/gss_err.c:53 +msgid "User not found" +msgstr "Pengguna tidak ditemukan" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/po/tr.po new/gss-ntlmssp-1.3.2/po/tr.po --- old/gss-ntlmssp-1.3.1/po/tr.po 1970-01-01 01:00:00.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/po/tr.po 2026-09-16 23:39:23.000000000 +0200 @@ -0,0 +1,169 @@ +# GSS-NTLMSSP Translation Template file. +# Copyright (C) 2015 Simo Sorce <[email protected]> +# This file is distributed under the same license as the gssntlmssp package. +# Simo Sorce <[email protected]>, 2015. +# Oğuz Ersen <[email protected]>, 2024. +msgid "" +msgstr "" +"Project-Id-Version: gssntlmssp 0.5.0\n" +"Report-Msgid-Bugs-To: [email protected]\n" +"POT-Creation-Date: 2015-02-20 09:49-0500\n" +"PO-Revision-Date: 2024-07-28 07:38+0000\n" +"Last-Translator: Oğuz Ersen <[email protected]>\n" +"Language-Team: Turkish <https://translate.fedoraproject.org/projects/"; +"gss-ntlmssp/master/tr/>\n" +"Language: tr\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=2; plural=n != 1;\n" +"X-Generator: Weblate 5.6.2\n" + +#: src/gss_err.c:24 +msgid "Unknown Error" +msgstr "Bilinmeyen Hata" + +#. ERR_DECODE +#: src/gss_err.c:25 +msgid "Failed to decode data" +msgstr "Verilerin kodu çözülemedi" + +#. ERR_ENCODE +#: src/gss_err.c:26 +msgid "Failed to encode data" +msgstr "Veriler kodlanamadı" + +#. ERR_CRYPTO +#: src/gss_err.c:27 +msgid "Crypto routine failure" +msgstr "Kripto işlemi hatası" + +#. ERR_NOARG +#: src/gss_err.c:28 +msgid "A required argument is missing" +msgstr "Gerekli argüman eksik" + +#. ERR_BADARG +#: src/gss_err.c:29 +msgid "Invalid value in argument" +msgstr "Geçersiz argüman değeri" + +#. ERR_NONAME +#: src/gss_err.c:30 +msgid "Name is empty" +msgstr "Ad boş" + +#. ERR_NOSRVNAME +#: src/gss_err.c:31 +msgid "Not a server name" +msgstr "Sunucu adı değil" + +#. ERR_NOUSRNAME +#: src/gss_err.c:32 +msgid "Not a user name" +msgstr "Kullanıcı adı değil" + +#. ERR_BADLMLEVEL +#: src/gss_err.c:33 +msgid "Bad LM compatibility Level" +msgstr "Hatalı LM uyumluluk seviyesi" + +#. ERR_IMPOSSIBLE +#: src/gss_err.c:34 +msgid "An impossible error occurred" +msgstr "İmkansız bir hata oluştu" + +#. ERR_BADCTX +#: src/gss_err.c:35 +msgid "Invalid or incomplete context" +msgstr "Geçersiz veya eksik bağlam" + +#. ERR_WRONGCTX +#: src/gss_err.c:36 +msgid "Wrong context type" +msgstr "Yanlış bağlam türü" + +#. ERR_WRONGMSG +#: src/gss_err.c:37 +msgid "Wrong message type" +msgstr "Yanlış mesaj türü" + +#. ERR_REQNEGFLAG +#: src/gss_err.c:38 +msgid "A required Negotiate flag was not provided" +msgstr "Gerekli bir anlaşma seçeneği belirtilmedi" + +#. ERR_FAILNEGFLAGS +#: src/gss_err.c:39 +msgid "Failed to negotiate a common set of flags" +msgstr "Ortak bir seçenek kümesi üzerinde anlaşılamadı" + +#. ERR_BADNEGFLAGS +#: src/gss_err.c:40 +msgid "Invalid combinations of negotiate flags" +msgstr "Geçersiz anlaşma seçenekleri birleşimleri" + +#. ERR_NOSRVCRED +#: src/gss_err.c:41 +msgid "Not a server credential type" +msgstr "Sunucu kimlik bilgisi türü değil" + +#. ERR_NOUSRCRED +#: src/gss_err.c:42 +msgid "Not a user credential type" +msgstr "Kullanıcı kimlik bilgisi türü değil" + +#. ERR_BADCRED +#: src/gss_err.c:43 +msgid "Invalid or unknown credential" +msgstr "Geçersiz veya bilinmeyen kimlik bilgisi" + +#. ERR_NOTOKEN +#: src/gss_err.c:44 +msgid "Empty or missing token" +msgstr "Boş veya eksik belirteç" + +#. ERR_NOTSUPPORTED +#: src/gss_err.c:45 +msgid "Feature not supported" +msgstr "Özellik desteklenmiyor" + +#. ERR_NOTAVAIL +#: src/gss_err.c:46 +msgid "Feature not available" +msgstr "Özellik kullanılabilir değil" + +#. ERR_NAMETOOLONG +#: src/gss_err.c:47 +msgid "Name is too long" +msgstr "Ad çok uzun" + +#. ERR_NOBINDINGS +#: src/gss_err.c:48 +msgid "Required channel bingings are not available" +msgstr "Gerekli kanal bağlantıları kullanılabilir değil" + +#. ERR_TIMESKEW +#: src/gss_err.c:49 +msgid "Server and client clocks are too far apart" +msgstr "Sunucu ve istemci saatleri birbirinden çok farklı" + +#. ERR_EXPIRED +#: src/gss_err.c:50 +msgid "Expired" +msgstr "Süresi doldu" + +#. ERR_KEYLEN +#: src/gss_err.c:51 +msgid "Invalid key length" +msgstr "Geçersiz anahtar uzunluğu" + +#. ERR_NONTLMV1 +#: src/gss_err.c:52 +msgid "NTLM version 1 not allowed" +msgstr "NTLM sürüm 1'e izin verilmiyor" + +#. ERR_NOUSRFOUND +#: src/gss_err.c:53 +msgid "User not found" +msgstr "Kullanıcı bulunamadı" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/po/zh_Hant.po new/gss-ntlmssp-1.3.2/po/zh_Hant.po --- old/gss-ntlmssp-1.3.1/po/zh_Hant.po 1970-01-01 01:00:00.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/po/zh_Hant.po 2026-09-16 23:39:23.000000000 +0200 @@ -0,0 +1,169 @@ +# GSS-NTLMSSP Translation Template file. +# Copyright (C) 2015 Simo Sorce <[email protected]> +# This file is distributed under the same license as the gssntlmssp package. +# Simo Sorce <[email protected]>, 2015. +# hsu zangmen <[email protected]>, 2025. +msgid "" +msgstr "" +"Project-Id-Version: gssntlmssp 0.5.0\n" +"Report-Msgid-Bugs-To: [email protected]\n" +"POT-Creation-Date: 2015-02-20 09:49-0500\n" +"PO-Revision-Date: 2025-04-27 10:38+0000\n" +"Last-Translator: hsu zangmen <[email protected]>\n" +"Language-Team: Chinese (Traditional Han script) <https://"; +"translate.fedoraproject.org/projects/gss-ntlmssp/master/zh_Hant/>\n" +"Language: zh_Hant\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Generator: Weblate 5.11\n" + +#: src/gss_err.c:24 +msgid "Unknown Error" +msgstr "未知錯誤" + +#. ERR_DECODE +#: src/gss_err.c:25 +msgid "Failed to decode data" +msgstr "資料解碼失敗" + +#. ERR_ENCODE +#: src/gss_err.c:26 +msgid "Failed to encode data" +msgstr "資料編碼失敗" + +#. ERR_CRYPTO +#: src/gss_err.c:27 +msgid "Crypto routine failure" +msgstr "加密過程失敗" + +#. ERR_NOARG +#: src/gss_err.c:28 +msgid "A required argument is missing" +msgstr "缺少所需的參數" + +#. ERR_BADARG +#: src/gss_err.c:29 +msgid "Invalid value in argument" +msgstr "參數中的值無效" + +#. ERR_NONAME +#: src/gss_err.c:30 +msgid "Name is empty" +msgstr "名稱為空白" + +#. ERR_NOSRVNAME +#: src/gss_err.c:31 +msgid "Not a server name" +msgstr "不是伺服器名稱" + +#. ERR_NOUSRNAME +#: src/gss_err.c:32 +msgid "Not a user name" +msgstr "不是使用者名稱" + +#. ERR_BADLMLEVEL +#: src/gss_err.c:33 +msgid "Bad LM compatibility Level" +msgstr "不良 LM 相容性等級" + +#. ERR_IMPOSSIBLE +#: src/gss_err.c:34 +msgid "An impossible error occurred" +msgstr "發生不可能的錯誤" + +#. ERR_BADCTX +#: src/gss_err.c:35 +msgid "Invalid or incomplete context" +msgstr "無效或不完整的內容" + +#. ERR_WRONGCTX +#: src/gss_err.c:36 +msgid "Wrong context type" +msgstr "錯誤的內容類型" + +#. ERR_WRONGMSG +#: src/gss_err.c:37 +msgid "Wrong message type" +msgstr "錯誤的訊息類型" + +#. ERR_REQNEGFLAG +#: src/gss_err.c:38 +msgid "A required Negotiate flag was not provided" +msgstr "未提供所需的協商標誌" + +#. ERR_FAILNEGFLAGS +#: src/gss_err.c:39 +msgid "Failed to negotiate a common set of flags" +msgstr "未能協商一套共同的旗幟" + +#. ERR_BADNEGFLAGS +#: src/gss_err.c:40 +msgid "Invalid combinations of negotiate flags" +msgstr "協商標誌的無效組合" + +#. ERR_NOSRVCRED +#: src/gss_err.c:41 +msgid "Not a server credential type" +msgstr "不是伺服器憑證類型" + +#. ERR_NOUSRCRED +#: src/gss_err.c:42 +msgid "Not a user credential type" +msgstr "不是使用者憑證類型" + +#. ERR_BADCRED +#: src/gss_err.c:43 +msgid "Invalid or unknown credential" +msgstr "無效或未知憑證" + +#. ERR_NOTOKEN +#: src/gss_err.c:44 +msgid "Empty or missing token" +msgstr "空或遺失標記" + +#. ERR_NOTSUPPORTED +#: src/gss_err.c:45 +msgid "Feature not supported" +msgstr "己不支援該功能" + +#. ERR_NOTAVAIL +#: src/gss_err.c:46 +msgid "Feature not available" +msgstr "無法使用該功能" + +#. ERR_NAMETOOLONG +#: src/gss_err.c:47 +msgid "Name is too long" +msgstr "名稱太長" + +#. ERR_NOBINDINGS +#: src/gss_err.c:48 +msgid "Required channel bingings are not available" +msgstr "無法使用所需的頻道鈴聲" + +#. ERR_TIMESKEW +#: src/gss_err.c:49 +msgid "Server and client clocks are too far apart" +msgstr "伺服器和用戶端的時鐘相差太遠" + +#. ERR_EXPIRED +#: src/gss_err.c:50 +msgid "Expired" +msgstr "已過期" + +#. ERR_KEYLEN +#: src/gss_err.c:51 +msgid "Invalid key length" +msgstr "無效的金鑰長度" + +#. ERR_NONTLMV1 +#: src/gss_err.c:52 +msgid "NTLM version 1 not allowed" +msgstr "不允許 NTLM 版本 1" + +#. ERR_NOUSRFOUND +#: src/gss_err.c:53 +msgid "User not found" +msgstr "未找到使用者" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/src/gss_auth.c new/gss-ntlmssp-1.3.2/src/gss_auth.c --- old/gss-ntlmssp-1.3.1/src/gss_auth.c 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/src/gss_auth.c 2026-09-16 23:39:23.000000000 +0200 @@ -333,12 +333,22 @@ ext_sec = (ctx->neg_flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY); + if (ntlm_v1 && lm_chal_resp->length < 24) { + set_GSSERR(EINVAL); + goto done; + } + switch (cred->type) { case GSSNTLM_CRED_USER: if (ntlm_v1) { uint8_t client_chal[8] = { 0 }; + if (lm_chal_resp->length < 24) { + set_GSSERR(EINVAL); + goto done; + } + if (ext_sec) { memcpy(client_chal, lm_chal_resp->data, 8); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/src/gss_err.c new/gss-ntlmssp-1.3.2/src/gss_err.c --- old/gss-ntlmssp-1.3.1/src/gss_err.c 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/src/gss_err.c 2026-09-16 23:39:23.000000000 +0200 @@ -94,16 +94,9 @@ goto done; } - /* handle both XSI and GNU specific varints of strerror_r */ + /* handle both XSI and GNU specific variants of strerror_r */ errno = 0; -#if ((_POSIX_C_SOURCE >= 200112L || _XOPEN_SOURCE >= 600) && !_GNU_SOURCE) - /* XSI version */ - err = strerror_r(status_value, buf, 400); - /* The XSI-compliant strerror_r() function returns 0 on success. - * On error, a (positive) error number is returned (since glibc - * 2.13), or -1 is returned and errno is set to indicate the - * error (glibc versions before 2.13). */ -#else +#if STRERROR_R_CHAR_P { char *ret; ret = strerror_r(status_value, buf, 400); @@ -116,6 +109,13 @@ err = 0; } } +#else + /* XSI version */ + err = strerror_r(status_value, buf, 400); + /* The XSI-compliant strerror_r() function returns 0 on success. + * On error, a (positive) error number is returned (since glibc + * 2.13), or -1 is returned and errno is set to indicate the + * error (glibc versions before 2.13). */ #endif if (err == -1) err = errno; switch (err) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/src/gss_sec_ctx.c new/gss-ntlmssp-1.3.2/src/gss_sec_ctx.c --- old/gss-ntlmssp-1.3.1/src/gss_sec_ctx.c 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/src/gss_sec_ctx.c 2026-09-16 23:39:23.000000000 +0200 @@ -524,7 +524,7 @@ uint32_t *time_rec, gss_cred_id_t *delegated_cred_handle) { - struct gssntlm_ctx *ctx; + struct gssntlm_ctx *ctx = NULL; struct gssntlm_cred *cred = NULL; int lm_compat_lvl = -1; struct ntlm_buffer challenge = { 0 }; @@ -1039,13 +1039,15 @@ if ((retmaj != GSS_S_COMPLETE) && (retmaj != GSS_S_CONTINUE_NEEDED)) { - gssntlm_delete_sec_context(&tmpmin, (gss_ctx_id_t *)&ctx, NULL); + if (ctx != (struct gssntlm_ctx *)(*context_handle)) { + gssntlm_delete_sec_context(&tmpmin, (gss_ctx_id_t *)&ctx, NULL); + ctx = NULL; + } } else { if (mech_type) *mech_type = discard_const(&gssntlm_oid); if (ret_flags) *ret_flags = ctx->gss_flags; if (time_rec) *time_rec = GSS_C_INDEFINITE; } - *context_handle = (gss_ctx_id_t)ctx; gssntlm_release_name(&tmpmin, (gss_name_t *)&server_name); gssntlm_release_name(&tmpmin, (gss_name_t *)&gss_usrname); gssntlm_release_cred(&tmpmin, (gss_cred_id_t *)&usr_cred); @@ -1059,6 +1061,10 @@ ntlm_free_buffer_data(&enc_sess_key); ntlm_free_buffer_data(&target_info); + if (ctx != NULL) { + *context_handle = (gss_ctx_id_t)ctx; + } + return GSSERR(); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/src/ntlm_crypto.c new/gss-ntlmssp-1.3.2/src/ntlm_crypto.c --- old/gss-ntlmssp-1.3.1/src/ntlm_crypto.c 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/src/ntlm_crypto.c 2026-09-16 23:39:23.000000000 +0200 @@ -618,6 +618,8 @@ struct ntlm_buffer expected_response = { buf, 24 }; int ret; + if (nt_response->length < 24) return EINVAL; + ret = ntlm_compute_nt_response(nt_key, ext_sec, server_chal, client_chal, &expected_response); @@ -639,6 +641,8 @@ struct ntlm_buffer expected_response = { buf, 24 }; int ret; + if (lm_response->length < 24) return EINVAL; + ret = ntlm_compute_lm_response(lm_key, ext_sec, server_chal, client_chal, &expected_response); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gss-ntlmssp-1.3.1/version.m4 new/gss-ntlmssp-1.3.2/version.m4 --- old/gss-ntlmssp-1.3.1/version.m4 2024-02-27 14:28:41.000000000 +0100 +++ new/gss-ntlmssp-1.3.2/version.m4 2026-09-16 23:39:23.000000000 +0200 @@ -1,5 +1,5 @@ # Primary version number -m4_define([VERSION_NUMBER], [1.3.1]) +m4_define([VERSION_NUMBER], [1.3.2]) # If the PRERELEASE_VERSION_NUMBER is set, we'll append # it to the release tag when creating an RPM or SRPM
