[krbdev.mit.edu #9212] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Mon Aug 31 22:47:36 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9212 >


Fix error handling in KDC PAC processing

When get_pac_princ_with_realm() detects the wrong number of '@'
characters, return an error instead of 0.  When it encounters an error
from krb5_parse_name_flags(), do not leak client_str.

[ghudson at mit.edu: fixed memory leak; rewrote commit message]

(cherry picked from commit f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7)

https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
Author: TristanInSec <tristan.mtn at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: a88a18cafa1040a0c4f9c8d08288fc98831ec86d
Branch: krb5-1.22
 src/kdc/kdc_util.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list