| commit | 238d24af4ed1457b684b6e497d1ca134f9ea567d | |
| author | Alexander Bokovoy <ab@samba.org> | |
| Wed, 6 Jun 2012 13:52:18 +0000 (6 16:52 +0300) | ||
| committer | Alexander Bokovoy <ab@samba.org> | |
| Wed, 6 Jun 2012 16:22:51 +0000 (6 18:22 +0200) | ||
| tree | 5bc0b9da9babe0e902dd40df65ffe2384dbd0ccd | treesnapshot (tar.gz zip) |
| parent | f3df2988ba6928cde0bd89da321bbe74fd76f53f | commitdiff |
auth-kerberos: avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()
gss_get_name_attribute() can return unintialized pac_display_buffer
and later gss_release_buffer() will crash on attempting to release it.
The fix on MIT krb5 side is in 1.10.1, reported in both Debian and MIT upstream:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658514
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7087
We need to initialize variables before using gss_get_name_attribute()
Autobuild-User: Alexander Bokovoy <ab@samba.org>
Autobuild-Date: Wed Jun 6 18:22:51 CEST 2012 on sn-devel-104
gss_get_name_attribute() can return unintialized pac_display_buffer
and later gss_release_buffer() will crash on attempting to release it.
The fix on MIT krb5 side is in 1.10.1, reported in both Debian and MIT upstream:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658514
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7087
We need to initialize variables before using gss_get_name_attribute()
Autobuild-User: Alexander Bokovoy <ab@samba.org>
Autobuild-Date: Wed Jun 6 18:22:51 CEST 2012 on sn-devel-104
| auth/kerberos/gssapi_pac.c | diffblobblamehistory |