svn rev #19914: trunk/ src/lib/kadm5/srv/ src/lib/krb5/krb/

[tlyu@MIT.EDU]

Commit By: tlyu
Log Message: 
ticket: new
target_version: 1.6.3
tags: pullup
subject: fix CVE-2007-4000 modify_policy vulnerability

In kadm5_modify_policy_internal, check for nonexistence of policy
before doing anything with it, to avoid memory corruption.




Changed Files:
_U  trunk/
U   trunk/src/lib/kadm5/srv/svr_policy.c
U   trunk/src/lib/krb5/krb/gc_frm_kdc.c