[31573] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.22]: Fix reachable assert when importing krb5
daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Mon Aug 31 22:47:55 2026
From: ghudson@mit.edu
To: cvs-krb5@mit.edu
Message-Id: <20260901024749.DE1E1105757@krbdev.mit.edu>
Date: Mon, 31 Aug 2026 22:47:49 -0400 (EDT)
MIME-Version: 1.0
Reply-To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/74f3cc6a79d5c2058af59025a148588c05fb8c8e
commit 74f3cc6a79d5c2058af59025a148588c05fb8c8e
Author: Greg Hudson <ghudson@mit.edu>
Date: Mon Jun 1 08:59:34 2026 -0400
Fix reachable assert when importing krb5 names
If a name token contains trailing garbage, error out from
krb5_gss_import_name() instead of crashing the process with an
assertion failure. Reported by Aisle Research (Ze Sheng, Dmitrijs
Trizna, Luigino Camastra, Guido Vranken).
(cherry picked from commit 07818f1fd34560dbfd87c2f65bf8cd705be0e1d2)
ticket: 9217
version_fixed: 1.22.3
src/lib/gssapi/krb5/import_name.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/lib/gssapi/krb5/import_name.c b/src/lib/gssapi/krb5/import_name.c
index a067d0742..9a27b1468 100644
--- a/src/lib/gssapi/krb5/import_name.c
+++ b/src/lib/gssapi/krb5/import_name.c
@@ -297,7 +297,8 @@ import_name(OM_uint32 *minor_status, gss_buffer_t input_name_buffer,
goto fail_name;
cp += length;
}
- assert(cp == end);
+ if (cp != end)
+ goto fail_name;
} else {
status = GSS_S_BAD_NAMETYPE;
goto cleanup;
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
