RFR: 8280401: [sspi] gss_accept_sec_context leaves output_token uninitialized
Valerie Peng
valeriep at openjdk.java.net
Fri Jan 21 01:25:44 UTC 2022
On Thu, 20 Jan 2022 18:19:19 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Set `output_token` to empty. It is always accessed (even for a `GSS_S_FAILURE`) at https://github.com/openjdk/jdk/blob/cfa3f7493149170f2b23a516bc95110dab43fd06/src/java.security.jgss/share/native/libj2gss/GSSLibStub.c#L1160.
Changes look good. Remember to add the noreg-xxx label. Thanks~
-------------
Marked as reviewed by valeriep (Reviewer).
PR: https://git.openjdk.java.net/jdk/pull/7163
More information about the security-dev
mailing list