[krbdev.mit.edu #9217] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Mon Aug 31 22:47:55 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9217 >


Fix reachable assert when importing krb5 names

If a name token contains trailing garbage, error out from
krb5_gss_import_name() instead of crashing the process with an
assertion failure.  Reported by Aisle Research (Ze Sheng, Dmitrijs
Trizna, Luigino Camastra, Guido Vranken).

(cherry picked from commit 07818f1fd34560dbfd87c2f65bf8cd705be0e1d2)

https://github.com/krb5/krb5/commit/74f3cc6a79d5c2058af59025a148588c05fb8c8e
Author: Greg Hudson <ghudson at mit.edu>
Commit: 74f3cc6a79d5c2058af59025a148588c05fb8c8e
Branch: krb5-1.22
 src/lib/gssapi/krb5/import_name.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)



More information about the krb5-bugs mailing list