Skip Menu |
 

From: ghudson@mit.edu
Subject: SVN Commit

When FAST negotiation is performed against an older KDC
(rep->enc_part2->flags & TKT_FLG_ENC_PA_REP not set),
krb5int_fast_verify_nego did not set the value of *fast_avail, causing
stack garbage to be used in init_creds_step_reply. Initialize
*fast_avail at the beginning of the function per coding practices.


https://github.com/krb5/krb5/commit/c7f5da582f3cdd08cd82b0c6a25167303575014b
Commit By: ghudson
Revision: 24102
Changed Files:
U trunk/src/lib/krb5/krb/fast.c
From: tlyu@mit.edu
Subject: SVN Commit

pull up r24102 from trunk

------------------------------------------------------------------------
r24102 | ghudson | 2010-05-24 22:44:45 -0400 (Mon, 24 May 2010) | 11 lines

ticket: 6734
subject: FAST negotiation could erroneously succeed
target_version: 1.8.2
tags: pullup

When FAST negotiation is performed against an older KDC
(rep->enc_part2->flags & TKT_FLG_ENC_PA_REP not set),
krb5int_fast_verify_nego did not set the value of *fast_avail, causing
stack garbage to be used in init_creds_step_reply. Initialize
*fast_avail at the beginning of the function per coding practices.

https://github.com/krb5/krb5/commit/f655fbc0dcc49e1413ec3a805b40b162070f8f75
Commit By: tlyu
Revision: 24111
Changed Files:
U branches/krb5-1-8/src/lib/krb5/krb/fast.c