[krbdev.mit.edu #7952] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Jul 21 18:33:41 EDT 2014


Fix unlikely null dereference in TGS client code

If krb5_get_tgs_ktypes fails (due to an out-of-memory condition or an
error re-reading the profile), k5_make_tgs_req will dereference a null
pointer.  Check the return value before dereferencing defenctypes.

[ghudson at mit.edu: clarified commit message]

(cherry picked from commit 81e503c09ad9aef4a0afc6bf66a0269cde2151f3)

https://github.com/krb5/krb5/commit/70faf7db9d54ef464b220860d346c7d5f0ec83f3
Author: Neng Xue <xnsuda at yahoo.com>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 70faf7db9d54ef464b220860d346c7d5f0ec83f3
Branch: krb5-1.12
 src/lib/krb5/krb/send_tgs.c |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)



More information about the krb5-bugs mailing list