[31569] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.22]: Fix error handling in KDC PAC processing
daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Mon Aug 31 22:47:37 2026
From: ghudson@mit.edu
To: cvs-krb5@mit.edu
Message-Id: <20260901024732.09B3C105757@krbdev.mit.edu>
Date: Mon, 31 Aug 2026 22:47:32 -0400 (EDT)
MIME-Version: 1.0
Reply-To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
commit a88a18cafa1040a0c4f9c8d08288fc98831ec86d
Author: TristanInSec <tristan.mtn@gmail.com>
Date: Mon May 18 11:56:34 2026 -0400
Fix error handling in KDC PAC processing
When get_pac_princ_with_realm() detects the wrong number of '@'
characters, return an error instead of 0. When it encounters an error
from krb5_parse_name_flags(), do not leak client_str.
[ghudson@mit.edu: fixed memory leak; rewrote commit message]
(cherry picked from commit f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7)
ticket: 9212
version_fixed: 1.22.3
src/kdc/kdc_util.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/kdc/kdc_util.c b/src/kdc/kdc_util.c
index 6f88afa2d..33b803fa9 100644
--- a/src/kdc/kdc_util.c
+++ b/src/kdc/kdc_util.c
@@ -665,13 +665,13 @@ get_pac_princ_with_realm(krb5_context context, krb5_pac pac,
ret = krb5_parse_name_flags(context, client_str, flags, princ_out);
if (ret)
- return ret;
+ goto cleanup;
(*princ_out)->type = KRB5_NT_MS_PRINCIPAL;
cleanup:
free(client_str);
- return 0;
+ return ret;
}
/* This probably wants to be updated if you support last_req stuff */
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
