[krbdev.mit.edu #9216] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Mon Aug 31 22:47:49 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9216 >


Always copy mech name_type for GSS union names

In gssint_convert_name_to_union_name(), make a copy of the name_type
OID yielded by the mechanism's gss_display_name(), as it will later be
released with gss_release_oid().  We usually get away with not copying
the name type because gss_release_oid() usually ignores static
mechanism OIDs, but this property is fragile (it relies on mechanisms
implementing gss_internal_release_oid()).

Reported by Daniel Sands.

(cherry picked from commit 15a8dea777012268311c106e08d324acdfd8b13c)

https://github.com/krb5/krb5/commit/eb6c0b3a6f6233a5ace983ff043f635823ffcac8
Author: Greg Hudson <ghudson at mit.edu>
Commit: eb6c0b3a6f6233a5ace983ff043f635823ffcac8
Branch: krb5-1.22
 src/lib/gssapi/mechglue/g_glue.c | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)



More information about the krb5-bugs mailing list