[krbdev.mit.edu #6417] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Fri Mar 13 17:16:16 EDT 2009


acc_ctx_new() can return an error condition without establishing a
SPNEGO context structure.  This can cause a null pointer dereference
in cleanup code in spnego_gss_accept_sec_context().

http://src.mit.edu/fisheye/changelog/krb5/?cs=22084
Commit By: tlyu
Revision: 22084
Changed Files:
U   trunk/src/lib/gssapi/spnego/spnego_mech.c




More information about the krb5-bugs mailing list