[krbdev.mit.edu #9201] git commit

[Greg Hudson via RT]

Mon Mar 23 14:59:04 2026: Request 9201 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9201 >



Prevent read overrun in svc_auth_gssapi

In gssrpc__svcauth_gssapi(), check that the client handle length is at
least 4, to prevent an out-of-bounds read by get_client().

[ghudson at mit.edu: combined length<4 check with length==0 check;
rewrote commit message]

https://github.com/krb5/krb5/commit/f8a0bee0a54ba0d96804631a3261ecd233051863
Author: Rahul Hoysala <rahulhoysala07 at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: f8a0bee0a54ba0d96804631a3261ecd233051863
Branch: master
 src/lib/rpc/svc_auth_gssapi.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)