[krbdev.mit.edu #9211] git commit

[Greg Hudson via RT]

<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9211 >


Avoid null dereference in krb5_rd_cred()

A malformed KRB-CRED message may have fewer entries in the encrypted
ticket-info list than it has in the tickets list.  In each loop
iteration, check if we unexpectedly reached the end of the ticket-info
list to avoid a null dereference.

[ghudson at mit.edu: added comment; rewrote commit message]

(cherry picked from commit 48afa9abb89ab2176bb20624d87d010b9984fc08)

https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a
Author: TristanInSec <tristan.mtn at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 62196e2b269159a5465f5b8d0ed7cf6f29c3282a
Branch: krb5-1.22
 src/lib/krb5/krb/rd_cred.c | 5 +++++
 1 file changed, 5 insertions(+)