[krbdev.mit.edu #9211] git commit

[Greg Hudson via RT]

Mon May 18 21:25:50 2026: Request 9211 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9211 >



Avoid null dereference in krb5_rd_cred()

A malformed KRB-CRED message may have fewer entries in the encrypted
ticket-info list than it has in the tickets list.  In each loop
iteration, check if we unexpectedly reached the end of the ticket-info
list to avoid a null dereference.

[ghudson at mit.edu: added comment; rewrote commit message]

https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
Author: TristanInSec <tristan.mtn at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 48afa9abb89ab2176bb20624d87d010b9984fc08
Branch: master
 src/lib/krb5/krb/rd_cred.c | 5 +++++
 1 file changed, 5 insertions(+)