gss: don't truncate authtime in gsskrb5_extract_authtime_from_sec_context()
authorLuke Howard <lukeh@padl.com>
Sat, 14 Jan 2023 23:20:54 +0000 (10:20 +1100)
committerLuke Howard <lukeh@padl.com>
Sun, 15 Jan 2023 22:16:39 +0000 (09:16 +1100)
commit363e7d1e0fb84da29a023867ad7650e3da2ed330
treef7db98bbdf8f8756b8c3f8305617432bf2bc3b23
parent98858aa215c5dbd832b9d250d46ed38e2261e66c
gss: don't truncate authtime in gsskrb5_extract_authtime_from_sec_context()

The interface between the krb5 mechanism and the mechglue API
gsskrb5_extract_authtime_from_sec_context() assumed the authtime would fit into
an uint32_t, which is not the case on platforms where time_t is 64-bit.

Fixes: #1073
lib/gssapi/krb5/inquire_sec_context_by_oid.c
lib/gssapi/mech/gss_krb5.c