[krbdev.mit.edu #2891] Access to uninitialized variable in keytab.c in 1.3.6 code

""Morrison@MIT.EDU ""Morrison at MIT.EDU
Fri Jan 21 14:43:10 EST 2005


I checked the bug archive, and didn't see any reference to this, so...

There is a problem in src/lib/kdb/keytab.c where "context" is being
accessed before it is being assigned.  The assignment of "xrealm_tgt"
should happen after the "if" statement where "context" is assigned,
and not in the variable declaration.
 
 krb5_error_code
 krb5_ktkdb_get_entry(in_context, id, principal, kvno, enctype, entry)
     krb5_context          in_context;
     krb5_keytab           id;
     krb5_const_principal  principal;
     krb5_kvno             kvno;
     krb5_enctype          enctype;
     krb5_keytab_entry   * entry;
 {
     krb5_context          context;
     krb5_keyblock       * master_key;
     krb5_error_code       kerror = 0;
     krb5_key_data       * key_data;
     krb5_db_entry         db_entry;
     krb5_boolean          more = 0;
     int                   n = 0;
     int xrealm_tgt = is_xrealm_tgt(context, principal);
     int similar;
 
     if (ktkdb_ctx)
         context = ktkdb_ctx;
     else
         context = in_context;
 ... 




More information about the krb5-bugs mailing list