RFR 6722928: Support SSPI as a native GSS-API provider

Valerie Peng valerie.peng at oracle.com
Fri Jun 7 02:45:54 UTC 2019


Hi, Max,

<gssapi.h>

- line 424: the "(used to be const)" comment can now be removed.

<sspi.cpp>

- line 396-403: on line 338, there is no need to go to err as no memory 
has been allocated. What happens when jumping to err but the variables, 
i.e. value and name, have not been declared? Line 400-401 seems not used 
as there is no more goto err after line 391.

- line 528: the size of buffer here is 4*len + 1, but then when calling 
WideCharToMultiByte, the 6th argument is len. Seems inconsistent? line 
534: shouldn't we free "buffer" here?

- line 596: free cred allocated on line 588? line 610 and 617: free cred 
and cred->phCredK? line 638 and 644, 648 and 653: free cred, 
cred->phCredK and cred->phCredS?

- line 829: free the context handle allocated on line 807? line 879: 
free newCred? line 901: no memory de-allocation before returning error? 
line 921: seems redundant given line 918.

- line 1071: based on gss api doc, context_handle should be set to 
GSS_C_NO_CONTEXT after deletion.

- line 1333: what about secBuff[1].pvBuffer?

- line 1390, 1393, 1397: call gss_release_oid_set before returning failure?

- line 1471: should we return an error code here when FormatMessage() 
call failed?

Rest looks fine.

Thanks,

Valerie

On 6/4/2019 2:52 AM, Weijun Wang wrote:
> I uploaded an updated webrev in place. The only changes are:
>
> 1. s/SSPI_TRACE/SSPI_BRIDGE_TRACE/ in sspi.cpp
> 2. Several copyright year updates.
> 3. Remove one unused import.
>
> Thanks,
> Max
>
>> On May 30, 2019, at 11:18 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
>>
>> Here is the latest webrev
>>
>>    http://cr.openjdk.java.net/~weijun/6722928/webrev.07/



More information about the security-dev mailing list