romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-23 13:47:16 +03:00
Code Issues Projects Releases Packages Wiki Activity

Curl_input_negotiate: do not delegate GSSAPI credentials

Browse source 
This is a security flaw. See curl advisory 20110623 for details.

Reported by: Richard Silverman
This commit is contained in:
Daniel Stenberg 2011-06-08 00:10:26 +02:00
parent 9016958aa8
commit 5c314c6bb4
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/http_negotiate.c
View file

@ -243,7 +243,7 @@ int Curl_input_negotiate(struct connectdata *conn, bool proxy,
&neg_ctx->context,
neg_ctx->server_name,
GSS_C_NO_OID,
GSS_C_DELEG_FLAG,
0,
0,
GSS_C_NO_CHANNEL_BINDINGS,
&input_token,