From ghudson@MIT.EDU Wed Nov 19 18:25:08 1997 Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id SAA02791 for ; Wed, 19 Nov 1997 18:25:07 -0500 Received: from OLIVER.MIT.EDU by MIT.EDU with SMTP id AA22387; Wed, 19 Nov 97 18:25:06 EST Received: by oliver.MIT.EDU (950413.SGI.8.6.12/4.7) id SAA04156; Wed, 19 Nov 1997 18:25:08 -0500 Message-Id: <199711192325.SAA04156@oliver.MIT.EDU> Date: Wed, 19 Nov 1997 18:25:08 -0500 From: Greg Hudson To: bugs@RT-11.MIT.EDU Subject: libkrb4 doesn't check init_context return >Number: 501 >Category: krb5-libs >Synopsis: libkrb4 doesn't check init_context return >Confidential: no >Severity: serious >Priority: medium >Responsible: tlyu >State: feedback >Class: sw-bug >Submitter-Id: unknown >Arrival-Date: Wed Nov 19 18:26:01 EST 1997 >Last-Modified: Thu Apr 09 19:44:13 EDT 1998 >Originator: Greg Hudson >Organization: MIT >Release: 1.0 >Environment: System: IRIX oliver 6.3 12161207 IP32 >Description: There are three occurrances of krb5_init_context() in libkrb4. None of them check their return value. If the call fails, then you tend to get a core dump. >How-To-Repeat: Run a krb4-linked program with no /etc/krb5.conf file on your system. >Fix: None provided, but it's trivial. However, it's arguably also a bug that krb4 programs fail if you don't have an /etc/krb5.conf. --[15684]-- ------- End forwarded transaction >Audit-Trail: Responsible-Changed-From-To: krb5-unassigned->tlyu Responsible-Changed-By: tlyu Responsible-Changed-When: Sun Feb 22 19:07:01 1998 Responsible-Changed-Why: Mine now State-Changed-From-To: open-feedback State-Changed-By: tlyu State-Changed-When: Thu Apr 9 19:43:07 1998 State-Changed-Why: Should be fixed in -current now. The code checks the returned context against NULL rather than the error value, for some reason. This might want to get fixed later. >Unformatted: Grrr. Why does /mit/krb5/arch/sgi_53/sbin/krb5-send-pr send to bugs? ------- Forwarded transaction [15684] daemon@ATHENA.MIT.EDU (ghudson@MIT.EDU) Athena Bugs 11/19/97 18:15 (32 lines) Subject: krb4 library use of krb5_init_context() From: Date: Wed, 19 Nov 1997 18:15:26 -0500 To: bugs@MIT.EDU Reply-To: ghudson@MIT.EDU