[16865] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #9080] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Dec 5 18:22:17 2022

From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To: 
Message-ID: <rt-4.4.3-2-3283273-1670282530-941.9080-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9080":;
Date: Mon, 05 Dec 2022 18:22:10 -0500
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


Mon Dec 05 18:22:10 2022: Request 9080 was acted upon.
 Transaction: Ticket created by ghudson@mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson@mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9080 >



Fix gic_keytab crash on memory exhaustion

get_as_key_keytab() does not check the result of krb5_copy_keyblock(),
and dereferences a null pointer if it fails.  Remove the call and
steal the memory from kt_ent instead.

[ghudson@mit.edu: rewrote commit message; fixed comments]

https://github.com/krb5/krb5/commit/6bc90214830cb5239aa397c20763902f10f11786
Author: ChenChen Zhou <357726167@qq.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 6bc90214830cb5239aa397c20763902f10f11786
Branch: master
 src/lib/krb5/krb/gic_keytab.c | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post