svn rev #19045: branches/krb5-1-6/ src/kadmin/server/ src/lib/gssapi/mechglue/

[tlyu@MIT.EDU]

Commit By: tlyu
Log Message: 
ticket: 5302
version_fixed: 1.6

pull up r19043 from trunk

 r19043 at cathode-dark-space:  tlyu | 2007-01-09 14:45:25 -0500
 ticket: new
 target_version: 1.6
 tags: pullup
 subject: MITKRB5-SA-2006-003: mechglue argument handling too lax
 component: krb5-libs
 
 Fix mechglue argument checks so that output pointers are always
 initialized regardless of whether the other arguments fail to validate
 for some reason.  This avoids freeing of uninitialized pointers.
 
 Initialize the gss_buffer_descs in ovsec_kadmd.c.
 
 




Changed Files:
_U  branches/krb5-1-6/
U   branches/krb5-1-6/src/kadmin/server/ovsec_kadmd.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_accept_sec_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_acquire_cred.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_canon_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_compare_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_delete_sec_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_dsp_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_dsp_status.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_dup_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_exp_sec_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_export_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_imp_name.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_imp_sec_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_init_sec_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_initialize.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_inq_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_inq_cred.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_inq_names.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_process_context.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_seal.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_sign.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_store_cred.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_unseal.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/g_verify.c
U   branches/krb5-1-6/src/lib/gssapi/mechglue/oid_ops.c