[krbdev.mit.edu #6675] segfault in gss_export_sec_context
     Arlene Berry  via RT 
    rt-comment at krbdev.mit.edu
       
    Fri Mar  5 18:26:19 EST 2010
    
    
  
In src/lib/krb5/krb/authdata.c context is NULL and is dereferenced:
static krb5_error_code
k5_ad_size(krb5_context kcontext,
           krb5_authdata_context context,
           krb5_flags flags,
           size_t *sizep)
{
    int i;
    krb5_error_code code = 0;
    *sizep += sizeof(krb5_int32); /* count */
    for (i = 0; i < context->n_modules; i++) {
The back trace is:
#0  0x0045dfcf in k5_ad_size (kcontext=0x8054af8, context=0x0, flags=15,
    sizep=0xbffff078)
    at krb5/src/lib/krb5/krb/authdata.c:162
#1  0x0045f7a2 in krb5_authdata_context_size (kcontext=0x8054af8,
ptr=0x0, 
    sizep=0xbffff078)
    at krb5/src/lib/krb5/krb/authdata.c:1131 (line 1067 in your trunk)
#2  0x00484310 in krb5_size_opaque (kcontext=0x8054af8,
odtype=-1760647364, 
    arg=0x0, sizep=0xbffff078)
    at krb5/src/lib/krb5/krb/serialize.c:104 (line 105 in your trunk)
#3  0x006ed9c3 in kg_ctx_size (kcontext=0x8054af8, arg=0x8053700, 
    sizep=0xbffff0b4)
    at krb5/src/lib/gssapi/krb5/ser_sctx.c:361
    
    
More information about the krb5-bugs
mailing list