[1448] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

K 5 Beta 5 Forwarding Credentials fails on some systems

daemon@ATHENA.MIT.EDU (Doug Engert)
Mon Jun 5 12:49:32 1995

Date: Mon, 05 Jun 95 11:49:04 CDT
From: "Doug Engert" <DEEngert@anl.gov>
To: <KRB5-BUGS@MIT.EDU>

The module rd_cred.c frees up the ticket which was just received via
a forward operation.

The code at lines 173, 174

 pcur->ticket = *pdata;
 krb5_free_data(context, pdata);

copy the length and pointer to the data to the pcur->ticket, then
krb5_free_data frees both the krb5_data structure and the data.

This should be changed to

 krb5_xfree(pdata);

so as to only free the krb5_data structure, and not the data which the
pcur->ticket is still pointing at.

This appears to be the cause of the ASN.1 identifier problems which
some of us have seen while trying to use forwarded credentials.



           Douglas E. Engert
           Systems Programming
           Argonne National Laboratory
           9700 South Cass Avenue
           Argonne, Illinois  60439
           (708) 252-5444

           Internet: DEEngert@anl.gov

home help back first fref pref prev next nref lref last post