[krbdev.mit.edu #9145] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Oct 22 14:30:10 EDT 2024


Tue Oct 22 14:30:10 2024: Request 9145 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9145 >



Prevent late initialization of GSS error map

Some of the peripheral libgssapi_krb5 utility functions, such as
gss_str_to_oid(), do not access the mechanism list and therefore do
not reach any of the calls to gssint_mechglue_initialize_library().
If one of these functions is called early and produces an error, its
call to map_error() will operate on the uninitialized error map.  When
the library is later initialized, any entries added to the error map
this way will be leaked.

To ensure that the error map is initialized before it is operated on,
add library initialization calls to gssint_mecherrmap_map() and
gssint_mecherrmap_get().

https://github.com/krb5/krb5/commit/bba0c36394cb88265da6e3d6566dd88b9c7978ca
Author: Greg Hudson <ghudson at mit.edu>
Commit: bba0c36394cb88265da6e3d6566dd88b9c7978ca
Branch: master
 src/lib/gssapi/generic/Makefile.in   |  2 +-
 src/lib/gssapi/generic/deps          | 13 +++++++------
 src/lib/gssapi/generic/util_errmap.c |  6 +++++-
 3 files changed, 13 insertions(+), 8 deletions(-)



More information about the krb5-bugs mailing list