[krbdev.mit.edu #7794] git commit 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Fri Dec  6 21:11:22 EST 2013
    
    
  
Avoid malloc(0) in SPNEGO get_input_token
If we read a zero-length token in spnego_mech.c's get_input_token(),
set the value pointer to NULL instead of calling malloc(0).
https://github.com/krb5/krb5/commit/13fd26e1863c79f616653f6a10a58c01f65fceff
Author: Greg Hudson <ghudson at mit.edu>
Commit: 13fd26e1863c79f616653f6a10a58c01f65fceff
Branch: master
 src/lib/gssapi/spnego/spnego_mech.c |   15 +++++++++------
 1 files changed, 9 insertions(+), 6 deletions(-)
    
    
More information about the krb5-bugs
mailing list