Date: Sun, 15 Dec 2013 22:40:43 -0500 From: Glen Barber <gjb@FreeBSD.org> To: Benjamin Kaduk <bjk@FreeBSD.org> Cc: svn-src-stable@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org, svn-src-stable-8@freebsd.org Subject: Re: svn commit: r259449 - in stable/8: . crypto/heimdal/lib/gssapi/krb5 sys/sys Message-ID: <20131216034043.GK1446@glenbarber.us> In-Reply-To: <201312160230.rBG2UvH5008664@svn.freebsd.org> References: <201312160230.rBG2UvH5008664@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--M9kwpIYUMbI/2cCx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Dec 16, 2013 at 02:30:57AM +0000, Benjamin Kaduk wrote: > Author: bjk (doc committer) > Date: Mon Dec 16 02:30:56 2013 > New Revision: 259449 > URL: http://svnweb.freebsd.org/changeset/base/259449 >=20 > Log: > MFC r259286,259424,259425: > Apply patch from upstream Heimdal for encoding fix > =20 > RFC 4402 specifies the implementation of the gss_pseudo_random() > function for the krb5 mechanism (and the C bindings therein). > The implementation uses a PRF+ function that concatenates the output > of individual krb5 pseudo-random operations produced with a counter > and seed. The original implementation of this function in Heimdal > incorrectly encoded the counter as a little-endian integer, but the > RFC specifies the counter encoding as big-endian. The implementation > initializes the counter to zero, so the first block of output (16 oct= ets, > for the modern AES enctypes 17 and 18) is unchanged. (RFC 4402 speci= fies > that the counter should begin at 1, but both existing implementations > begin with zero and it looks like the standard will be re-issued, with > test vectors, to begin at zero.) > =20 This breaks stable/8 build. Glen --M9kwpIYUMbI/2cCx Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQIcBAEBCAAGBQJSrnY7AAoJELls3eqvi17QHvwP/jR7CKp7Jdj6L+nzmCk6u6nR lKFdkwNjnG/b2W+Rr4KVREZGReNe1+t++OnFrSgo3HuWc5Ou8ulXKHeg4NSRinf2 3RO2gLNZhSi6EH3GHdgRronJcRi4N9Fo91n0CV3uUQswA6CeMD9150sgaKEH91r4 CH9cXGO5XBiws1wlAkUpYq74Yg8urREyMqxgbPC/iQV6KUCKCEczfpc/aGD8B5Tn 32Ytk0U3XhHQHrVvZxwx3w15HEztQSD7aPclgaq599wOLt9wqQELkaQd8DmxJdVm UzqMcHc6c6JMTNGmr9eEftGPoMAfcI6ws7sa+JQVZPW9GJRik5YeQC5dfmth92Gr e62YwJ8+99WCnOYcRsH8charCaNfaIc3TsCklwU8QfusFNZS+GojhU0WnRSbW5v2 KuJ7sl9nH02DoN2UspFhTNX0OXroOJgZUeV9y98veBnEpnI+BJAY/Naul8Ya17wE WnoVUaib8GOmoPevIx1CjxrZJtJC3uyJKhXF9HwUwa2LqAjolilNatbzFYBDnjRP TvdPD8NnuMMPT2+QJU+tZaKY7QXQbj872a8zjgyw7yCW37U5diTnJ1gOdb/EXO8k aO9nE8j2wdqJpr9u8Yrhg5kLgykfDHzxr4Zg5ecRHVlcOxUYiD+2SHV4pbzq+RUu iUV2m96IaeSO/xlN88zI =kaj+ -----END PGP SIGNATURE----- --M9kwpIYUMbI/2cCx--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20131216034043.GK1446>