[11178] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #6512] SVN Commit

daemon@ATHENA.MIT.EDU (Tom Yu via RT)
Mon Sep 28 16:45:21 2009

Mail-Followup-To: rt@krbdev.mit.edu
mail-copies-to: never
From: "Tom Yu via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6512@krbdev.mit.edu>
Message-ID: <rt-6512-31757.19.0966954229614@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6512'":;"'AdminCc of krbdev.mit.edu Ticket #6512'":;@MIT.EDU
Date: Mon, 28 Sep 2009 20:44:24 +0000 (UTC)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


pull up r22413, r22410 from trunk

 ------------------------------------------------------------------------
 r22413 | epeisach | 2009-06-17 13:51:31 -0400 (Wed, 17 Jun 2009) | 5 lines

 ticket: 6512

 In the previous patch - I neglected a potential NULL deref in the call
 to krb5int_yarrow_cipher_final.  Trivial fix.
 ------------------------------------------------------------------------
 r22410 | epeisach | 2009-06-11 13:01:13 -0400 (Thu, 11 Jun 2009) | 7 lines

 subject:  krb5int_yarrow_final could deref NULL if out of memory
 ticket: 6512
  krb5int_yarrow_final tests if the Yarrow_CTX* is valid (not NULL) -
  and if not - signals and error for return - but still invokes
  mem_zero (memset) with it as an argument.  This will only happen in
  an out-of-memory situation.

http://src.mit.edu/fisheye/changelog/krb5/?cs=22799
Commit By: tlyu
Revision: 22799
Changed Files:
U   branches/krb5-1-7/src/lib/crypto/yarrow/yarrow.c

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post