[krbdev.mit.edu #1730] src/lib/krb4/mk_auth.c clears return value

Sam Hartman via RT rt-comment at krbdev.mit.edu
Fri Aug 15 14:39:15 EDT 2003




krb_mk_auth clears the return value for the keyschedule parameter with
a memset.  This prevents callers from using the key schedule, which
breaks code.



More information about the krb5-bugs mailing list