diff '--color=auto' -Nur samba-4.20.2-orig/third_party/heimdal/kdc/kerberos5.c samba-4.20.2/third_party/heimdal/kdc/kerberos5.c --- samba-4.20.2-orig/third_party/heimdal/kdc/kerberos5.c 2024-01-29 15:41:27.905090000 +0100 +++ samba-4.20.2/third_party/heimdal/kdc/kerberos5.c 2024-08-12 18:51:33.762921290 +0200 @@ -2947,11 +2947,11 @@ */ if (r->pa_max_life > 0) t = rk_time_add(start, min(rk_time_sub(t, start), r->pa_max_life)); - else if (r->client->max_life) + else if (r->client->max_life && *r->client->max_life) t = rk_time_add(start, min(rk_time_sub(t, start), *r->client->max_life)); - if (r->server->max_life) + if (r->server->max_life && *r->server->max_life) t = rk_time_add(start, min(rk_time_sub(t, start), *r->server->max_life)); @@ -2982,10 +2982,10 @@ t = *b->rtime; if(t == 0) t = MAX_TIME; - if(r->client->max_renew) + if(r->client->max_renew && *r->client->max_renew) t = rk_time_add(start, min(rk_time_sub(t, start), *r->client->max_renew)); - if(r->server->max_renew) + if(r->server->max_renew && *r->server->max_renew) t = rk_time_add(start, min(rk_time_sub(t, start), *r->server->max_renew)); #if 0 diff '--color=auto' -Nur samba-4.20.2-orig/third_party/heimdal/lib/hdb/hdb.asn1 samba-4.20.2/third_party/heimdal/lib/hdb/hdb.asn1 --- samba-4.20.2-orig/third_party/heimdal/lib/hdb/hdb.asn1 2024-01-29 15:41:27.997090800 +0100 +++ samba-4.20.2/third_party/heimdal/lib/hdb/hdb.asn1 2024-08-12 16:44:16.510798170 +0200 @@ -233,8 +233,8 @@ valid-start[5] KerberosTime OPTIONAL, valid-end[6] KerberosTime OPTIONAL, pw-end[7] KerberosTime OPTIONAL, - max-life[8] INTEGER (-2147483648..2147483647) OPTIONAL, - max-renew[9] INTEGER (-2147483648..2147483647) OPTIONAL, + max-life[8] INTEGER (0..4294967295) OPTIONAL, + max-renew[9] INTEGER (0..4294967295) OPTIONAL, flags[10] HDBFlags, etypes[11] HDB-EncTypeList OPTIONAL, generation[12] GENERATION OPTIONAL,