RFR: 8280401: [sspi] gss_accept_sec_context leaves output_token uninitialized

Valerie Peng valeriep at openjdk.java.net
Fri Jan 21 01:25:44 UTC 2022


On Thu, 20 Jan 2022 18:19:19 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Set `output_token` to empty. It is always accessed (even for a `GSS_S_FAILURE`) at https://github.com/openjdk/jdk/blob/cfa3f7493149170f2b23a516bc95110dab43fd06/src/java.security.jgss/share/native/libj2gss/GSSLibStub.c#L1160.

Changes look good. Remember to add the noreg-xxx label. Thanks~

-------------

Marked as reviewed by valeriep (Reviewer).

PR: https://git.openjdk.java.net/jdk/pull/7163



More information about the security-dev mailing list