[krbdev.mit.edu #8726] Directly dereference the pointer certname which may be NULL in parse_fs_options()

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Fri Aug 10 11:02:30 EDT 2018


parse_fs_options() checks for an empty input, so may be assuming that 
strtok_r() won't return null the first time.  I found experimentally 
that it does so if the input is "," (the delimiter).  So we can make 
this code perform a null deref with:

  pkinit_identities = FILE:,


More information about the krb5-bugs mailing list