diff options
| author | Ezra Peisach <epeisach@mit.edu> | 2005-01-17 17:32:26 +0000 |
|---|---|---|
| committer | Ezra Peisach <epeisach@mit.edu> | 2005-01-17 17:32:26 +0000 |
| commit | dc57beffefe7df48e440887976fbbaefa71b828a (patch) | |
| tree | 2ea5c8b302ec1453e862e50e313ab10aa93a32b7 /src/lib/gssapi/gss_libinit.c | |
| parent | 2656e5e1e026f800559eed79dfcc58cd3da5d9a0 (diff) | |
| download | krb5-dc57beffefe7df48e440887976fbbaefa71b828a.tar.gz krb5-dc57beffefe7df48e440887976fbbaefa71b828a.tar.xz krb5-dc57beffefe7df48e440887976fbbaefa71b828a.zip | |
subject; krb5_do_preauth could attempt to free NULL pointer
* preauth2.c (krb5_do_preauth): Upon error in decoding
krb5_type_info{,2}, on failure, do not call krb5_free_type_info
with a null pointer.
The only way to reach this code is to set a preauth list requesting for ETYPE_INFO
or ETYPE_INFO2 in a call to krb5_get_in_tkt_with_password.
Before sending the request, krb5_do_preauth tries to parse a NULL length asn1 buffer,
fails and tries to free a null pointer.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17047 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi/gss_libinit.c')
0 files changed, 0 insertions, 0 deletions