[17010] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #9168] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Tue Mar 25 14:45:29 2025

From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To: 
Message-ID: <rt-4.4.3-2-1845231-1742928321-1507.9168-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9168":;
Date: Tue, 25 Mar 2025 14:45:21 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


Tue Mar 25 14:45:21 2025: Request 9168 was acted upon.
 Transaction: Ticket created by ghudson@mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson@mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9168 >



Fix IAKERB accept_sec_context null pointer crash

When iakerb_gss_accept_sec_context() processes an initial token which
is not an IAKERB token (because the client already has a service
ticket), set *context_handle.  Otherwise subsequent GSS calls using
this context will dereference a null pointer and crash.

[ghudson@mit.edu: moved fix to cleanup handler to avoid code
duplication; added tests; rewrote commit message]

https://github.com/krb5/krb5/commit/f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Author: Alexander Bokovoy <abokovoy@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Branch: master
 src/appl/gss-sample/t_gss_sample.py |  7 +++++++
 src/lib/gssapi/krb5/iakerb.c        | 18 +++++++++---------
 2 files changed, 16 insertions(+), 9 deletions(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post