RT RT/krbdev.mit.edu: Ticket History #6434 krb5_cc_resolve() will crash if a null name param is provided Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

History   Display mode: [Brief headers] [Full headers]
      Wed Mar 25 23:48:22 2009  jaltman - Ticket created    
     
Subject: krb5_cc_resolve() will crash if a null name param is provided

Proposed fix:

Index: ccache/ccbase.c
===================================================================
--- ccache/ccbase.c     (revision 22114)
+++ ccache/ccbase.c     (working copy)
@@ -181,7 +181,7 @@
     const krb5_cc_ops *ops;

     pfx = NULL;
-    cp = strchr (name, ':');
+    cp = name ? strchr (name, ':') : NULL;
     if (!cp) {
        if (krb5_cc_dfl_ops)
            return (*krb5_cc_dfl_ops->resolve)(context, cache, name);



Download (untitled) 443b
      Wed Mar 25 23:48:33 2009  jaltman - Component krb5-libs added    
      Wed Mar 25 23:48:33 2009  jaltman - Version_reported 1.6.4 added    
      Fri Mar 27 13:23:57 2009  ghudson - Status changed from open to resolved    
      Fri Mar 27 13:23:57 2009  ghudson - Correspondence added    
     
A null check was added in r20560 (July 2008) and should be present in
the 1.7 release.


Download (untitled) 86b
      Mon Jan  4 23:38:56 2010  tlyu - Version_Fixed 1.8 added