[krbdev.mit.edu #8334] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jan 4 10:53:08 EST 2016


Check context handle in gss_export_sec_context()

After commit 4f35b27a9ee38ca0b557ce8e6d059924a63d4eff, the
context_handle parameter in gss_export_sec_context() is dereferenced
before arguments are validated by val_exp_sec_ctx_args().  With a null
context_handle, the new code segfaults instead of failing gracefully.
Revert this part of the commit and only dereference context_handle if
it is non-null.

https://github.com/krb5/krb5/commit/b6f29cbd2ab132e336b5435447348400e9a9e241
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: b6f29cbd2ab132e336b5435447348400e9a9e241
Branch: master
 src/lib/gssapi/mechglue/g_exp_sec_context.c |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list