[372] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

question about sendauth

daemon@ATHENA.MIT.EDU (Jim Miller)
Thu Oct 14 20:52:02 1993

From: jim@bilbo.suite.com (Jim Miller)
Date: Thu, 14 Oct 93 19:36:51 -0500
To: krb5-bugs@MIT.EDU
Reply-To: Jim_Miller@suite.com


For Kerberos 5, pre-beta 3...

All throughout the sendauth code you take care to zero out the "authent"  
structure before returning to the caller...except at the very end of the  
function:

	} else
		krb5_free_cred_contents(&creds);
	return(0);
}


Is the absence of "memset((char *)&authent, 0, sizeof(authent));" in the final  
"else" clause a bug, or is it absent for a reason?

Thanks,

Jim_Miller@suite.com


P.S. BTW, why do you zero out the authent struct?

home help back first fref pref prev next nref lref last post