git://git.exim.org
/
exim.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Taint: track SASL auth intermediate inputs
[exim.git]
/
src
/
src
/
auths
/
heimdal_gssapi.c
diff --git
a/src/src/auths/heimdal_gssapi.c
b/src/src/auths/heimdal_gssapi.c
index 7a74d5be57f07dbe6d254cc732bcc5aab26f3557..59884ef58e2c32d0f3c2f1567c5dff23f436efe1 100644
(file)
--- a/
src/src/auths/heimdal_gssapi.c
+++ b/
src/src/auths/heimdal_gssapi.c
@@
-334,7
+334,7
@@
while (step < 4)
break;
case 1:
break;
case 1:
- gbufdesc_in.length = b64decode(from_client, USS &gbufdesc_in.value);
+ gbufdesc_in.length = b64decode(from_client, USS &gbufdesc_in.value
, GET_TAINTED
);
if (gclient)
{
maj_stat = gss_release_name(&min_stat, &gclient);
if (gclient)
{
maj_stat = gss_release_name(&min_stat, &gclient);
@@
-419,7
+419,7
@@
while (step < 4)
break;
case 3:
break;
case 3:
- gbufdesc_in.length = b64decode(from_client, USS &gbufdesc_in.value);
+ gbufdesc_in.length = b64decode(from_client, USS &gbufdesc_in.value
, GET_TAINTED
);
maj_stat = gss_unwrap(&min_stat,
gcontext,
&gbufdesc_in, /* data from client */
maj_stat = gss_unwrap(&min_stat,
gcontext,
&gbufdesc_in, /* data from client */