Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.7.21.83]) by krbdev.mit.edu (8.9.3p2) with ESMTP id OAA11146; Tue, 6 Jan 2004 14:33:22 -0500 (EST) From: gsu@UU.NET Received: from cmr1.ash.ops.us.uu.net (cmr1.ash.ops.us.uu.net [198.5.241.39]) by pacific-carrier-annex.mit.edu (8.12.4/8.9.2) with ESMTP id i06JXLmt000474 for ; Tue, 6 Jan 2004 14:33:21 -0500 (EST) Received: from imr1.ash.ops.us.uu.net by cmr1.ash.ops.us.uu.net with ESMTP (peer crosschecked as: imr1.ash.ops.us.uu.net [153.39.43.46]) id QQpwio04427 for ; Tue, 6 Jan 2004 19:33:21 GMT Received: from imr1.ash.ops.us.uu.net by imr1.ash.ops.us.uu.net with ESMTP (peer crosschecked as: localhost [127.0.0.1]) id QQpwio29955 for ; Tue, 6 Jan 2004 19:32:36 GMT Received: from galaxy.argfrp.us.uu.net by imr1.ash.ops.us.uu.net with ESMTP (peer crosschecked as: galaxy.argfrp.us.uu.net [153.39.56.113]) id QQpwio29921; Tue, 6 Jan 2004 19:32:36 GMT Received: from localhost (gsu@localhost) by galaxy.argfrp.us.uu.net (8.9.3p2/8.9.3) with ESMTP id QQpwio29248; Tue, 6 Jan 2004 19:32:35 GMT X-Authentication-Warning: galaxy.argfrp.us.uu.net: gsu owned process doing -bs Date: Tue, 6 Jan 2004 14:32:35 -0500 (EST) To: krb5-bugs@mit.edu Cc: grace.su@mci.com Subject: bug in krb5_cc_remove_cred API? Message-Id: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-RT-Original-Encoding: us-ascii Content-Length: 690 Hi, I am coding a test program that calls krb5_cc_remove_cred and encountered a problem. Checking out the source code (krb5-1.3.1.tar) that I downloaded from your site, I believe the problem is caused by a bug in the code. The file is src/lib/krb5/ccache/ccfns.c The function is krb5_cc_remove_cred. This function calls cache->ops->remove_cred without checking if cache->ops->remove_cred is NULL. In fact cache->ops->remove_cred is NULL, hence calling program core dumps. cache->ops is defined as krb5_fcc_ops in src/lib/krb5/ccache/cc_file.c and the remove_cred entry is NULL. Please let me know if I am correct or I missed anything. Thank you. Grace Su grace.su@mci.com