[krbdev.mit.edu #7952] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jun 30 19:40:09 EDT 2014


Fix unlikely null dereference in TGS client code

If krb5_get_tgs_ktypes fails (due to an out-of-memory condition or an
error re-reading the profile), k5_make_tgs_req will dereference a null
pointer.  Check the return value before dereferencing defenctypes.

[ghudson at mit.edu: clarified commit message]

https://github.com/krb5/krb5/commit/81e503c09ad9aef4a0afc6bf66a0269cde2151f3
Author: Neng Xue <xnsuda at yahoo.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 81e503c09ad9aef4a0afc6bf66a0269cde2151f3
Branch: master
 src/lib/krb5/krb/send_tgs.c |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)



More information about the krb5-bugs mailing list