svn rev #22409: trunk/src/lib/krb5/krb/

[epeisach@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=22409
Commit By: epeisach
Log Message:
ticket: 6511
subject: krb5int_rd_chpw_rep could call krb5_free_error with random value

clang picked up on a path in which krberror is not set and passed as
an argument to krb5_free_error(). Essentially if the clearresult
length < 2 but everything decodes - you can hit this path...




Changed Files:
U   trunk/src/lib/krb5/krb/chpw.c
Modified: trunk/src/lib/krb5/krb/chpw.c
===================================================================
--- trunk/src/lib/krb5/krb/chpw.c	2009-06-08 20:14:58 UTC (rev 22408)
+++ trunk/src/lib/krb5/krb/chpw.c	2009-06-10 02:55:22 UTC (rev 22409)
@@ -83,7 +83,7 @@
     krb5_error_code ret;
     krb5_data cipherresult;
     krb5_data clearresult;
-    krb5_error *krberror;
+    krb5_error *krberror = NULL;
     krb5_replay_data replay;
     krb5_keyblock *tmp;