Skip Menu |
 

History Show all quoted text — Show full headers
# Mon Jan 17 12:32:31 2005 epeisach (Ezra Peisach) - Ticket created
From: epeisach@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 630B
subject; krb5_do_preauth could attempt to free NULL pointer.

* preauth2.c (krb5_do_preauth): Upon error in decoding
krb5_type_info{,2}, on failure, do not call krb5_free_type_info
with a null pointer.

The only way to reach this code is to set a preauth list requesting for ETYPE_INFO
or ETYPE_INFO2 in a call to krb5_get_in_tkt_with_password.

Before sending the request, krb5_do_preauth tries to parse a NULL length asn1 buffer,
fails and tries to free a null pointer.


To generate a diff of this commit:



cvs diff -r5.458 -r5.459 krb5/src/lib/krb5/krb/ChangeLog
cvs diff -r5.27 -r5.28 krb5/src/lib/krb5/krb/preauth2.c
# Mon Jan 17 12:32:34 2005 epeisach (Ezra Peisach) - Status changed from 'new' to 'resolved'
# Mon Jan 17 12:32:34 2005 epeisach (Ezra Peisach) - Requestor epeisach (Ezra Peisach) added
# Tue May 23 14:17:58 2006 tlyu (Taylor Yu) - Subject changed from '[no subject]' to 'krb5_do_preauth could attempt to free NULL pointer'
# Tue May 23 14:17:59 2006 tlyu (Taylor Yu) - Component krb5-libs added
# Tue May 23 15:18:49 2006 tlyu (Taylor Yu) - Version_Fixed 1.5 added