[15684] in Athena Bugs
krb4 library use of krb5_init_context()
daemon@ATHENA.MIT.EDU (ghudson@MIT.EDU)
Wed Nov 19 18:15:29 1997
From: <ghudson@MIT.EDU>
Date: Wed, 19 Nov 1997 18:15:26 -0500
To: bugs@MIT.EDU
Reply-To: ghudson@MIT.EDU
>Submitter-Id: net
>Originator: Greg Hudson
>Organization: MIT
>Confidential: no
>Synopsis: Return value not checked for krb5_init_context()
>Severity: serious
>Priority: medium
>Category: krb5-libs
>Class: sw-bug
>Release: 1.0
>Environment:
System: IRIX oliver 6.3 12161207 IP32
>Description:
There are three occurrances of krb5_init_context() in libkrb4. None of
them check their return value. If the call fails, then you tend to get
a core dump.
>How-To-Repeat:
Run a krb4-linked program with no /etc/krb5.conf file on your system.
>Fix:
None provided, but it's trivial. However, it's arguably also a bug that
krb4 programs fail if you don't have an /etc/krb5.conf.
