[krbdev.mit.edu #9186] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Oct 23 17:02:55 EDT 2025


Thu Oct 23 17:02:55 2025: Request 9186 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9186 >



Fix OTP preauth crash with null prompter

In doprompt(), check if the caller provided a prompter before
dereferencing it.  Similar code returns either EIO or
KRB5_LIBOS_CANTREADPWD; use EIO for this case as OTP preauth prompts
for a PIN and not a Kerberos password.

[ghudson at mit.edu: edited commit message]

https://github.com/krb5/krb5/commit/ca97bf697ab1561af1fbd12f5fd13466ec35a962
Author: Alexander Bokovoy <abokovoy at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: ca97bf697ab1561af1fbd12f5fd13466ec35a962
Branch: master
 src/lib/krb5/krb/preauth_otp.c | 3 +++
 1 file changed, 3 insertions(+)



More information about the krb5-bugs mailing list