[krbdev.mit.edu #7096] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Mar 1 15:49:20 EST 2012


kdb_db2's ctx_iterate makes an convenience alias to dbc->db in order
to call more invoke call the DB's seq method.  This alias may become
invalidated if the callback writes to the DB, since ctx_lock() may
re-open the DB in order to acquire a write lock.  Fix the bug by
getting rid of the convenience alias.

Most KDB iteration operations in the code base do not write to the DB,
but kdb5_util update_princ_encryption does.

Bug discovered and diagnosed by will.fiveash at oracle.com.

http://src.mit.edu/fisheye/changelog/krb5/?cs=25723
Commit By: ghudson
Revision: 25723
Changed Files:
U   trunk/src/plugins/kdb/db2/kdb_db2.c



More information about the krb5-bugs mailing list