[krbdev.mit.edu #7826] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Thu Jan 16 15:46:36 EST 2014


Fix krb5_copy_context

krb5_copy_context has been broken since 1.8 (it broke in r22456)
because k5_copy_etypes crashes on null enctype lists.  Subsequent
additions to the context structure were not reflected in
krb5_copy_context, creating double-free bugs.  Make k5_copy_etypes
handle null input and account for all new fields in krb5_copy_context.
Reported by Arran Cudbard-Bell.

(back ported from commit c452644d91d57d8b05ef396a029e34d0c7a48920)

https://github.com/krb5/krb5/commit/3befd466d452870235a4474300e08b26bd214502
Author: Tom Yu <tlyu at mit.edu>
Commit: 3befd466d452870235a4474300e08b26bd214502
Branch: krb5-1.11
 src/lib/krb5/krb/copy_ctx.c   |   12 ++++++++++++
 src/lib/krb5/krb/etype_list.c |    2 ++
 2 files changed, 14 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list