Skip Menu |
 

History Show all quoted text — Show full headers
# Tue Jun 09 22:55:24 2009 epeisach (Ezra Peisach) - Ticket created
From: epeisach@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 361B

clang picked up on a path in which krberror is not set and passed as
an argument to krb5_free_error(). Essentially if the clearresult
length < 2 but everything decodes - you can hit this path...



https://github.com/krb5/krb5/commit/ccdee10e6b9c218f3e82e5987d716bfb7cbb1c90
Commit By: epeisach
Revision: 22409
Changed Files:
U trunk/src/lib/krb5/krb/chpw.c
# Tue Jun 09 22:55:24 2009 epeisach (Ezra Peisach) - Requestor epeisach (Ezra Peisach) added
# Tue Jun 09 22:55:24 2009 epeisach (Ezra Peisach) - Status changed from 'new' to 'review'
# Mon Sep 28 16:44:21 2009 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'
# Mon Sep 28 16:44:21 2009 tlyu (Taylor Yu) - Version_Fixed 1.7.1 added
# Mon Sep 28 16:44:21 2009 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 611B

------------------------------------------------------------------------
r22409 | epeisach | 2009-06-09 22:55:22 -0400 (Tue, 09 Jun 2009) | 7 lines

ticket: 6511
subject: krb5int_rd_chpw_rep could call krb5_free_error with random value

clang picked up on a path in which krberror is not set and passed as
an argument to krb5_free_error(). Essentially if the clearresult
length < 2 but everything decodes - you can hit this path...

https://github.com/krb5/krb5/commit/cbcb4a5f87d97c7537279f61b8c5fdbdd1c32508
Commit By: tlyu
Revision: 22798
Changed Files:
U branches/krb5-1-7/src/lib/krb5/krb/chpw.c