[krbdev.mit.edu #8201] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Jun 11 12:12:07 EDT 2015


Tolerate null oid pointer in gss_release_oid()

Under some circumstances, gss_inquire_name() can call
gss_release_oid() with a null oid pointer, which currently causes a
null dereference.  The least invasive fix is for gss_release_oid() to
check for the invalid null pointer and return an error, like other
GSS-API functions do.

https://github.com/krb5/krb5/commit/4676e823e6ee9a5731872b31c5588c1b5932e0a3
Author: Greg Hudson <ghudson at mit.edu>
Commit: 4676e823e6ee9a5731872b31c5588c1b5932e0a3
Branch: master
 src/lib/gssapi/mechglue/g_initialize.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)



More information about the krb5-bugs mailing list