- Andre Guibert de Bruet found and fixed a case where malloc() was called but

                                  Changelog

Daniel Stenberg (12 Apr 2008)

- Andre Guibert de Bruet found and fixed a case where malloc() was called but

  was not checked for a NULL return, in the Negotiate code.

Daniel Fandrich (9 Apr 2008)

- Added test cases 1024 & 1025 to test a scenario similar to the one reported

  by Ben Combee where libcurl would send the wrong cookie to a redirected

   the confusion that could lead to a hung transfer

 o curl_easy_reset() resets the max redirect limit properly

 o configure now correctly recognizes Heimdal and MIT gssapi libraries

 o malloc() failure check in Negotiate

This release includes the following known bugs:

advice from friends like these:

 Michal Marek, Daniel Fandrich, Scott Barrett, Alexey Simak, Daniel Black,

 Rafa Muyo

 Rafa Muyo, Andre Guibert de Bruet

        Thanks! (and sorry if I forgot to mention someone)

  infof(conn->data, "%s", buf);

}

/* returning zero (0) means success, everything else is treated as "failure"

   with no care exactly what the failure was */

int Curl_input_negotiate(struct connectdata *conn, bool proxy,

                         const char *header)

{

        unsigned char * mechToken         = NULL;

        size_t          mechTokenLength   = 0;

        spnegoToken = malloc(input_token.length);

        if(input_token.value == NULL)

          return ENOMEM;

          return CURLE_OUT_OF_MEMORY;

        spnegoToken = malloc(input_token.length);

        if(spnegoToken == NULL)

          return CURLE_OUT_OF_MEMORY;

        spnegoTokenLength = input_token.length;

        object = OBJ_txt2obj ("1.2.840.113554.1.2.2", 1);