| commit | af02273b76a792ca71fcb369a2a647496c948531 | |
| author | Alexander Bokovoy <ab@samba.org> | |
| Thu, 7 Jun 2012 15:24:38 +0000 (7 18:24 +0300) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Fri, 22 Jun 2012 19:50:10 +0000 (22 21:50 +0200) | ||
| tree | 84a0c73459479254974dacb2be86c443729e2491 | treesnapshot (tar.gz zip) |
| parent | 437274c5f923940836fca4494a03f893f5e4217f | commitdiff |
s3-librpc-crypto: avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()
gss_get_name_attribute() can return unintialized pac_display_buffer
and later gss_release_buffer() will crash on attempting to release it.
The fix on MIT krb5 side is in 1.10.1, reported in both Debian and MIT upstream:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658514
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7087
We need to initialize variables before using gss_get_name_attribute()
Fix bug #8988 (avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()).
(cherry picked from commit 185c2054fd22de0ab07a762a279a7ef0db5d802c)
gss_get_name_attribute() can return unintialized pac_display_buffer
and later gss_release_buffer() will crash on attempting to release it.
The fix on MIT krb5 side is in 1.10.1, reported in both Debian and MIT upstream:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658514
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7087
We need to initialize variables before using gss_get_name_attribute()
Fix bug #8988 (avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()).
(cherry picked from commit 185c2054fd22de0ab07a762a279a7ef0db5d802c)
| source3/librpc/crypto/gse.c | diffblobblamehistory |