[krbdev.mit.edu #8214] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jul 6 15:56:46 EDT 2015


Fix uncommon null dereference in PKINIT client

crypto_retrieve_cert_sans() is allowed to set its princs output to
NULL, although the OpenSSL implementation rarely does.  Fix the
TRACE_PKINIT_CLIENT_SAN_KDCCERT_PRINC for loop to allow this like other
parts of the function do, and also get rid of the unnecessary princptr
variable by using an integer index like other parts of the function.

Based on a patch from Daniel Deptula.

https://github.com/krb5/krb5/commit/47b37b9e13ca1456ba6710f31bc41012d050dd07
Author: Greg Hudson <ghudson at mit.edu>
Commit: 47b37b9e13ca1456ba6710f31bc41012d050dd07
Branch: master
 src/plugins/preauth/pkinit/pkinit_clnt.c |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list