Russ Allbery writes:

It was a type error on 64-bit systems in the keyring decoding code. This patch will fix the problem. I'll push a WebAuth 4.2.1 release with this
fix.

Entirely my fault; I didn't run the test suite on a 64-bit system.  :/

--- a/lib/keyring.c
+++ b/lib/keyring.c
@@ -347,7 +347,7 @@ decode(struct webauth_context *ctx, char *input, size_t length,
        uint32_t key_type;
        char name[32];
        void *key_data;
-        uint32_t key_len;
+        size_t key_len;
        struct webauth_key *key;

        DECODE_TIME_N(A_CREATION_TIME, i, "key creation", &creation);

Yep, that fixed it! No more errors from Apache at startup, and the wa_keyring utility can read our keyring file now. And we can access webauth- protected pages
on this server again.

Thanks for the quick patch!

-- Kai

Reply via email to