[krbdev.mit.edu #9080] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Dec 5 18:22:10 EST 2022


Mon Dec 05 18:22:10 2022: Request 9080 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9080 >



Fix gic_keytab crash on memory exhaustion

get_as_key_keytab() does not check the result of krb5_copy_keyblock(),
and dereferences a null pointer if it fails.  Remove the call and
steal the memory from kt_ent instead.

[ghudson at mit.edu: rewrote commit message; fixed comments]

https://github.com/krb5/krb5/commit/6bc90214830cb5239aa397c20763902f10f11786
Author: ChenChen Zhou <357726167 at qq.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 6bc90214830cb5239aa397c20763902f10f11786
Branch: master
 src/lib/krb5/krb/gic_keytab.c | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)



More information about the krb5-bugs mailing list