Ticket History #501: libkrb4 doesn't check init

# Mon Aug 19 14:20:22 2002 The RT System itself - Default: Import/ changed from (no value) to (no value)

Download (untitled) / with headers
text/plain 2.3KiB

From ghudson@MIT.EDU Wed Nov 19 18:25:08 1997
Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id SAA02791 for <bugs@RT-11.MIT.EDU>; Wed, 19 Nov 1997 18:25:07 -0500
Received: from OLIVER.MIT.EDU by MIT.EDU with SMTP
id AA22387; Wed, 19 Nov 97 18:25:06 EST
Received: by oliver.MIT.EDU (950413.SGI.8.6.12/4.7) id SAA04156; Wed, 19 Nov 1997 18:25:08 -0500
Message-Id: <199711192325.SAA04156@oliver.MIT.EDU>
Date: Wed, 19 Nov 1997 18:25:08 -0500
From: Greg Hudson <ghudson@MIT.EDU>
To: bugs@RT-11.MIT.EDU
Subject: libkrb4 doesn't check init_context return

Show quoted text

>Number: 501
>Category: krb5-libs
>Synopsis: libkrb4 doesn't check init_context return
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: tlyu
>State: feedback
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Wed Nov 19 18:26:01 EST 1997
>Last-Modified: Thu Apr 09 19:44:13 EDT 1998
>Originator: Greg Hudson
>Organization:

MIT

Show quoted text

>Release: 1.0
>Environment:

System: IRIX oliver 6.3 12161207 IP32

Show quoted text

>Description:

There are three occurrances of krb5_init_context() in libkrb4. None of
them check their return value. If the call fails, then you tend to get
a core dump.

Show quoted text

>How-To-Repeat:

Run a krb4-linked program with no /etc/krb5.conf file on your system.

Show quoted text

>Fix:

None provided, but it's trivial. However, it's arguably also a bug that
krb4 programs fail if you don't have an /etc/krb5.conf.
--[15684]--

------- End forwarded transaction

Show quoted text

>Audit-Trail:

Responsible-Changed-From-To: krb5-unassigned->tlyu
Responsible-Changed-By: tlyu
Responsible-Changed-When: Sun Feb 22 19:07:01 1998
Responsible-Changed-Why:

Mine now

State-Changed-From-To: open-feedback
State-Changed-By: tlyu
State-Changed-When: Thu Apr 9 19:43:07 1998
State-Changed-Why:

Should be fixed in -current now. The code checks the returned context
against NULL rather than the error value, for some reason. This might
want to get fixed later.

Show quoted text

>Unformatted:

Grrr. Why does /mit/krb5/arch/sgi_53/sbin/krb5-send-pr send to bugs?

------- Forwarded transaction

[15684] daemon@ATHENA.MIT.EDU (ghudson@MIT.EDU) Athena Bugs 11/19/97 18:15 (32 lines)
Subject: krb4 library use of krb5_init_context()
From: <ghudson@MIT.EDU>
Date: Wed, 19 Nov 1997 18:15:26 -0500
To: bugs@MIT.EDU
Reply-To: ghudson@MIT.EDU

# Mon Aug 19 14:20:23 2002 The RT System itself - Component krb5-libs added

# Wed Nov 06 17:24:01 2002 tlyu (Taylor Yu) - Subject changed from 'libkrb4 doesn't check init_context return ' to 'libkrb4 doesn't check init_context return'

# Wed Nov 06 17:24:01 2002 tlyu (Taylor Yu) - Status changed from 'stalled' to 'resolved'

# Wed Nov 06 17:24:01 2002 tlyu (Taylor Yu) - Version_Fixed 1.0.6 added

Ticket History #501: libkrb4 doesn't check init_context return