[krbdev.mit.edu #6402] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Mar 16 13:58:54 EDT 2009


pull up r22084 from trunk

acc_ctx_new() can return an error condition without establishing a
SPNEGO context structure.  This can cause a null pointer dereference
in cleanup code in spnego_gss_accept_sec_context().

http://src.mit.edu/fisheye/changelog/krb5/?cs=22099
Commit By: tlyu
Revision: 22099
Changed Files:
U   branches/krb5-1-7/src/lib/gssapi/spnego/spnego_mech.c




More information about the krb5-bugs mailing list