[krbdev.mit.edu #6662] SVN Commit

[Tom Yu via RT]

Code introduced in krb5-1.7 can cause an assertion failure if a
KDC-REQ is internally inconsistent, specifically if the ASN.1 tag
doesn't match the msg_type field.  Thanks to Emmanuel Bouillon (NATO
C3 Agency) for discovering and reporting this vulnerability.

http://src.mit.edu/fisheye/changelog/krb5/?cs=23724
Commit By: tlyu
Revision: 23724
Changed Files:
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/fast_util.c