[krbdev.mit.edu #9213] git commit
Greg Hudson via RT
rt at krbdev.mit.edu
Mon Aug 31 22:47:40 EDT 2026
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9213 >
Fix null dereference in SPNEGO token processing
Commit fdceb225f881e2b1337eebcb9a9443fa4a9be3fd erroneously removed a
check from get_negTokenResp() for successful decoding of the
mechListMIC field. Restore the check to prevent a null pointer
dereference.
[ghudson at mit.edu: rewrote commit message]
(cherry picked from commit 4ae75cded0fbeb1def4c82e352759089d80d40ab)
https://github.com/krb5/krb5/commit/67b499d637014365fb13621285db88e89b8ddafb
Author: Jeremy Hitt <jeremy.hitt at isilon.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 67b499d637014365fb13621285db88e89b8ddafb
Branch: krb5-1.22
src/lib/gssapi/spnego/spnego_mech.c | 2 ++
1 file changed, 2 insertions(+)
More information about the krb5-bugs
mailing list