[krbdev.mit.edu #9168] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Mar 25 14:45:21 EDT 2025


Tue Mar 25 14:45:21 2025: Request 9168 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9168 >



Fix IAKERB accept_sec_context null pointer crash

When iakerb_gss_accept_sec_context() processes an initial token which
is not an IAKERB token (because the client already has a service
ticket), set *context_handle.  Otherwise subsequent GSS calls using
this context will dereference a null pointer and crash.

[ghudson at mit.edu: moved fix to cleanup handler to avoid code
duplication; added tests; rewrote commit message]

https://github.com/krb5/krb5/commit/f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Author: Alexander Bokovoy <abokovoy at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Branch: master
 src/appl/gss-sample/t_gss_sample.py |  7 +++++++
 src/lib/gssapi/krb5/iakerb.c        | 18 +++++++++---------
 2 files changed, 16 insertions(+), 9 deletions(-)



More information about the krb5-bugs mailing list