Ticket History #6512: krb5int_yarrow_final could deref NULL if out of memory

krb5int_yarrow_final tests if the Yarrow_CTX* is valid (not NULL) -
and if not - signals and error for return - but still invokes
mem_zero (memset) with it as an argument. This will only happen in
an out-of-memory situation.



https://github.com/krb5/krb5/commit/2ba32d69322ac7d2b1b8c7b02d996f2ec02d9e59
Commit By: epeisach
Revision: 22410
Changed Files:
U trunk/src/lib/crypto/yarrow/yarrow.c

pull up r22413, r22410 from trunk

------------------------------------------------------------------------
r22413 | epeisach | 2009-06-17 13:51:31 -0400 (Wed, 17 Jun 2009) | 5 lines

ticket: 6512

In the previous patch - I neglected a potential NULL deref in the call
to krb5int_yarrow_cipher_final. Trivial fix.
------------------------------------------------------------------------
r22410 | epeisach | 2009-06-11 13:01:13 -0400 (Thu, 11 Jun 2009) | 7 lines

subject: krb5int_yarrow_final could deref NULL if out of memory
ticket: 6512
krb5int_yarrow_final tests if the Yarrow_CTX* is valid (not NULL) -
and if not - signals and error for return - but still invokes
mem_zero (memset) with it as an argument. This will only happen in
an out-of-memory situation.

https://github.com/krb5/krb5/commit/e305ced680579fb9788765b19085184192abfce7
Commit By: tlyu
Revision: 22799
Changed Files:
U branches/krb5-1-7/src/lib/crypto/yarrow/yarrow.c