Re: [kitten] New Version Notification for draft-kaduk-kitten-gss-loop-01.txt (fwd)

[Jeffrey Hutzelman <[e-mail]>]

On Wed, 2013-11-20 at 18:17 -0500, Greg Hudson wrote:
> On 11/20/2013 05:45 PM, Benjamin Kaduk wrote:
> > We discussed whether (either at the abstract level or the C bindings) it
> > is guaranteed to be safe to call gss_release_buffer() twice on the same
> > buffer.
> 
> I think that unfortunately it is not safe per the spec, although it is
> probably safe in every GSSAPI implementation.
> 
> > The send_token()/receive_token() routines are not very good examples. 
> > It is probably better to rewrite them to use sendmsg/recvmsg with
> > socketpair, which also eliminates the need to add framing with the token
> > length.
> 
> I think the RFC should only include the do_initiator() and do_acceptor()
> functions.  The sample code does not need to compile and run, only
> demonstrate how the API should be used and be a reasonable starting
> point for cut and paste.

Agree.

-- Jeff