[krbdev.mit.edu #8600] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Fri Sep 22 12:48:46 EDT 2017


Prevent null dereference with keyboard master key

If krb5_db_fetch_mkey() prompts for a master key and needs to
determine the kvno, check that the master entry contains any key data
before dereferencing the first element.  Reported by Joshua Schaeffer.

(cherry picked from commit 29c504504f0c56c861d968ba2498590bf34714cd)

https://github.com/krb5/krb5/commit/763a884a0186a95134acc1afe26b8647a2ee1ee3
Author: Greg Hudson <ghudson at mit.edu>
Commit: 763a884a0186a95134acc1afe26b8647a2ee1ee3
Branch: krb5-1.14
 src/lib/kdb/kdb5.c |    7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list