[krbdev.mit.edu #9201] git commit

[Greg Hudson via RT]

<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9201 >


Prevent read overrun in svc_auth_gssapi

In gssrpc__svcauth_gssapi(), check that the client handle length is at
least 4, to prevent an out-of-bounds read by get_client().

[ghudson at mit.edu: combined length<4 check with length==0 check;
rewrote commit message]

(cherry picked from commit f8a0bee0a54ba0d96804631a3261ecd233051863)

https://github.com/krb5/krb5/commit/9d9487956766f74485a32de6ad0f628f4251a6f0
Author: Rahul Hoysala <rahulhoysala07 at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 9d9487956766f74485a32de6ad0f628f4251a6f0
Branch: krb5-1.22
 src/lib/rpc/svc_auth_gssapi.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)