[krbdev.mit.edu #9213] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Mon Aug 31 22:47:40 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9213 >


Fix null dereference in SPNEGO token processing

Commit fdceb225f881e2b1337eebcb9a9443fa4a9be3fd erroneously removed a
check from get_negTokenResp() for successful decoding of the
mechListMIC field.  Restore the check to prevent a null pointer
dereference.

[ghudson at mit.edu: rewrote commit message]

(cherry picked from commit 4ae75cded0fbeb1def4c82e352759089d80d40ab)

https://github.com/krb5/krb5/commit/67b499d637014365fb13621285db88e89b8ddafb
Author: Jeremy Hitt <jeremy.hitt at isilon.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 67b499d637014365fb13621285db88e89b8ddafb
Branch: krb5-1.22
 src/lib/gssapi/spnego/spnego_mech.c | 2 ++
 1 file changed, 2 insertions(+)



More information about the krb5-bugs mailing list