* Paul R. Turgyan (pturgyan@quince.ifs.umich.edu) wrote: > > I ran into this bug last week, and have been running the fix below > for a couple of days. I'm not totally convinced my fix is correct. > The Cyrus-SASL gssapi plugin calls gss_unwrap and passes the returned > buffer to dnNormalize2. But the buffer is not guarenteed to be NULL > terminated coming out of gss_unwrap. I was wondering about gss_unwrap but hadn't gone and looked at the code yet. Very cool, many thanks.. Have you passed this on to the SASL folks? Thanks, Stephen
Attachment:
pgpa6YN0Ka1yk.pgp
Description: PGP signature