{"push_id":638788421,"size":137,"distinct_size":137,"ref":"refs/heads/master","head":"8cdd54c99709d367f03c12ffcaa2580e7e3efd1f","before":"5aca37ae552a81b3671dc08b61095af87bb6da15","commits":[{"sha":"92aad0fa3d9a6c65641197243d7ae0c02b567729","author":{"email":"d2956b30a883e5c2886a826c448c349415c0a4e0@twosigma.com","name":"Roland C. Dowdeswell"},"message":"Fix kinit.1's synopsis w.r.t. -f and -F.","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/92aad0fa3d9a6c65641197243d7ae0c02b567729"},{"sha":"0e93a04c01540abe7937b579fef111781903e754","author":{"email":"c5e2f0824a6b8bf7ea1d693b4c00a7e90e09ef7a@h5l.org","name":"Love Hörnquist Åstrand"},"message":"arcfour-hmac-md5 is weak","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/0e93a04c01540abe7937b579fef111781903e754"},{"sha":"b3f29170a35a8e249cd512db682e7f4092af663e","author":{"email":"0189fa3658cdb61f6a9dcd2bc760be591c5980b0@secure-endpoints.com","name":"Jeffrey Altman"},"message":"hcrypto: w32crypto crypt provider handle leak\n\n_hc_CryptProvider() returns a global handle to a Win32 Crypt Provider.\nIf the global handle is NULL, then a handle is allocated.  Unfortunately,\ndue to a coding mistake the global handle variable, g_cryptprovider, was\nnever set and a new handle was allocated with each call.\n\nRefactor the function to ensure that the global handle is the value\nthat is returned.  Use NULL instead of 0 for pointer assignment.\n\nChange-Id: If1ef3aa19cbd1d51860370db24c086e86922ff0d","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/b3f29170a35a8e249cd512db682e7f4092af663e"},{"sha":"ef8e4da01035981b228d8d26ca25598dd81bc766","author":{"email":"0189fa3658cdb61f6a9dcd2bc760be591c5980b0@secure-endpoints.com","name":"Jeffrey Altman"},"message":"only perform dir separator normalization for file paths\n\nCommit ad7e54d698433cea77bfb4c98ac93255743d0c93 introduced the use\nof _krb5_expand_path_tokens() to expand tokens (and on Windows convert\npath delimiters) within credential cache names.  This is safe to do\nfor the path based credential cache types FILE, DIR and SCC but on\nWindows is unsafe for the non-path types.\n\nFor example on Windows, the API credential cache names are often based\non the principal name and the principal name is parsed from the ccname.\nThis practice was introduced with the version v2 ccapi when there was\nno method of enumerating the caches from the krb5 library.\n\nThis change adds a \"filepath\" boolean parameter to _krb5_expand_path_tokens()\nwhich is set to TRUE (non-zero) when the input is a file path and FALSE\n(zero) when the input is not a file path.  _krb5_expand_path_tokens() will\nonly perform directory separator normalization on Windows when the\n\"filepath\" parameter is TRUE.\n\nThis change is not the preferred solution because it requires that the\nlibrary be aware of all credential cache types that use path based\nresiduals.  The preferred solution would require that the credential cache\nimplementation indicate whether or not it uses a path based residual.\n\nThis change has been implemented using a prefix test and not a change to\nstruct krb5_cc_ops because existing ccache plugins will not know how to\nadvertise their use of path based residuals and that path expansion is\nsafe.\n\nChange-Id: I8135991e8ce69fc5273d381ea9c2078bc2bcd19a","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/ef8e4da01035981b228d8d26ca25598dd81bc766"},{"sha":"59b8f4ff840aaaf1f06c348d26da64cc75f87eac","author":{"email":"f5c558f8e99a2b0387f21381b7cea2be77465448@arnes.si","name":"Rok Papež, ARNES"},"message":"ipv6 loopbacks fix for GNU libc getaddrinfo()\n\nOn any OS with a properly implemented getaddrinfo() this change is a\nno-op. Passing NULL for the hint is supposed to be the same as an\naddrinfo structure with all fields set to 0. There is no need to set\nai_family to AF_UNSPEC because that value is already 0.\n\nGNU libc doesn't follow standard behaviour. Quoting from\nhttp://man7.org/linux/man-pages/man3/getaddrinfo.3.html :\n\n  \"Specifying hints as NULL is equivalent to setting ai_socktype and\n  ai_protocol to 0; ai_family to AF_UNSPEC; and ai_flags to\n  (AI_V4MAPPED | AI_ADDRCONFIG). (POSIX specifies different defaults for\n  ai_flags; see NOTES.)\"\n\nThe NOTES section says:\n\n  \"According to POSIX.1-2001, specifying hints as NULL should cause\n  ai_flags to be assumed as 0. The GNU C library instead assumes a value\n  of (AI_V4MAPPED | AI_ADDRCONFIG) for this case, since this value is\n  considered an improvement on the specification.\"\n\nThe patch makes sure that krb5_parse_address works consistently on both\nGNU libc and systems that follow POSIX.1-2001 to the letter. Some\nincorrect Fedora 17 patches managed to break IPv6 connectivity and were\nlater backed out (see discussion at https://bugzilla.redhat.com/808147).\nThis patch resolves the incompatibility.\n\nSigned-off-by: Ken Dreyer <ktdreyer@ktdreyer.com>","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/59b8f4ff840aaaf1f06c348d26da64cc75f87eac"},{"sha":"c1564e2cdb84f4ee4f8c1d70fcebe9db973cafca","author":{"email":"0189fa3658cdb61f6a9dcd2bc760be591c5980b0@secure-endpoints.com","name":"Jeffrey Altman"},"message":"Merge pull request #119 from ktdreyer/ipv6-loopback\n\nipv6 loopbacks fix","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/c1564e2cdb84f4ee4f8c1d70fcebe9db973cafca"},{"sha":"49861eb2c5012a6508af461f4e6397d61b1e1fda","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"Delay KRB5_KTNAME lookup until keytab resolution.\n\nPreviously getenv(\"KRB5_KTNAME\") happened in\n\n    init_context_from_config_file()\n\nwhich would capture the environment value as an override without\nusing strdup() to get a private copy, so it would get trashed in\napplications that dynamically update the environment (e.g. Perl\ncode that has a tied %ENV).\n\nThe patch delays getenv(\"KRB5_KTNAME\") until the context's value\nof default_keytab is actually needed, and the environment can preempt\nthe context's default at that time.\n\n[ Do we need to worry about issuid() being true initially when the\n  context is created, but not later, because the application changes\n  both the real and effective uid?  If so the issuid() state should\n  be saved when the context is created and the saved value queried. ]","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/49861eb2c5012a6508af461f4e6397d61b1e1fda"},{"sha":"5023f55208e9940d983d98fb548a5f2e6553a072","author":{"email":"4af992ea29d9acf383a28cf2ea963917f22ebc76@padl.com","name":"Luke Howard"},"message":"Add Windows CNG (BCrypt) support to HCrypto EVP API","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/5023f55208e9940d983d98fb548a5f2e6553a072"},{"sha":"238392809b74d84da3512b01200fe2ac3797e8ce","author":{"email":"4af992ea29d9acf383a28cf2ea963917f22ebc76@padl.com","name":"Luke Howard"},"message":"wincng: Remove trailing space","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/238392809b74d84da3512b01200fe2ac3797e8ce"},{"sha":"e4a857143490a23dfe351668440d1ae4faa1f710","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"Fix DB: prefix check","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/e4a857143490a23dfe351668440d1ae4faa1f710"},{"sha":"c3ddece8d4b3247e9ff090068c392e86e73cbd3e","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"Name canon kdc config breaks iprop","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/c3ddece8d4b3247e9ff090068c392e86e73cbd3e"},{"sha":"a71fa7b04d28c091b3118a2de8a0e282567bb5f0","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"Silence LLVM compiler warnings\n\nShould we simply drop FTP from the source at some point?","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/a71fa7b04d28c091b3118a2de8a0e282567bb5f0"},{"sha":"529f17bbec4053d39fcc4ac2471fb9ba0b5c1900","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"OpenSSL master requires more explicit #includes","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/529f17bbec4053d39fcc4ac2471fb9ba0b5c1900"},{"sha":"08c628b240bc7b81b6abfcafa6bf147e2187e4d9","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"BN_is_negative is no longer a macro in OpenSSL master","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/08c628b240bc7b81b6abfcafa6bf147e2187e4d9"},{"sha":"ba39f42b81b643531401f1cb7ab12f2e29bfcd4a","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"TBS vs Certificate sigalg consistency for RSA","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/ba39f42b81b643531401f1cb7ab12f2e29bfcd4a"},{"sha":"0d52fd607fd2ad094358a8c69ff49e46ec6254be","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"LLVM enum range warning","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/0d52fd607fd2ad094358a8c69ff49e46ec6254be"},{"sha":"d4fda7e4f0a739aca859d2d1626a873839b4f659","author":{"email":"86faeb3e05561b856666236e198c27e698275e82@twosigma.com","name":"Viktor Dukhovni"},"message":"LLVM unused variable warning","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/d4fda7e4f0a739aca859d2d1626a873839b4f659"},{"sha":"920eccc59e09c214557619744b76c0607f702f70","author":{"email":"c5e2f0824a6b8bf7ea1d693b4c00a7e90e09ef7a@h5l.org","name":"Love Hörnquist Åstrand"},"message":"X11 tools have outlived their usefulness, use SSH and pam with native locker","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/920eccc59e09c214557619744b76c0607f702f70"},{"sha":"35add96d37c3fbefc3ce70de23b085e552feb4db","author":{"email":"c5e2f0824a6b8bf7ea1d693b4c00a7e90e09ef7a@h5l.org","name":"Love Hörnquist Åstrand"},"message":"make sure that serial number is valid DER when done (found by Viktor Dukhovni)","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/35add96d37c3fbefc3ce70de23b085e552feb4db"},{"sha":"b7ca6bbc7ad67955b0ebb0e77181c22261566c1f","author":{"email":"a2e4e94a62a566dcc21141d8a67f60b23993f171@dukhovni.org","name":"Viktor Dukhovni"},"message":"Revert \"make sure that serial number is valid DER when done ...\"\n\nA simpler fix will be the next commit.\n\nThis reverts commit 35add96d37c3fbefc3ce70de23b085e552feb4db.","distinct":true,"url":"https://api.github.com/repos/jelmer/heimdal/commits/b7ca6bbc7ad67955b0ebb0e77181c22261566c1f"}]}