Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: ghudson@mit.edu Subject: git commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 663 Fix unlikely null dereference in mk_cred() If krb5_encrypt_keyhelper() returns an error, the ciphertext structure may contain a non-zero length, but it will already have freed the pointer to its data, making encrypt_credencpart()'s subsequent attempt to clear and free the memory fail. Remove that logic. Based on a patch from Jatin Nansi. https://github.com/krb5/krb5/commit/476284de8dc9a52b5544445cb1b316a417ae88f0 Author: Nalin Dahyabhai Committer: Greg Hudson Commit: 476284de8dc9a52b5544445cb1b316a417ae88f0 Branch: master src/lib/krb5/krb/mk_cred.c | 7 ------- 1 files changed, 0 insertions(+), 7 deletions(-)