Curl_input_negotiate: do not delegate GSSAPI credentials
authorDaniel Stenberg <daniel@haxx.se>
Tue, 7 Jun 2011 22:10:26 +0000 (00:10 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 22 Jun 2011 21:04:26 +0000 (23:04 +0200)
commit5c314c6bb449bfca06c1cdc383c84e7661faf42c
tree6cb475097a446d5b63bfb82c5b36f4a80a914fee
parent9016958aa8989f7d998476a1742d5806f6a3692d
Curl_input_negotiate: do not delegate GSSAPI credentials

This is a security flaw. See curl advisory 20110623 for details.

Reported by: Richard Silverman
lib/http_negotiate.c