Ticket History #6881: KDC double-free when PKINIT enabled [MITKRB5-SA-2011-003 CVE-2011-0284]

# Tue Mar 15 17:47:20 2011 tlyu (Taylor Yu) - Ticket created

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 251B

Fix a double-free condition in the KDC that can occur during an
AS-REQ when PKINIT is enabled.

https://github.com/krb5/krb5/commit/e1ce2955dbaf8fbbc52a9625a62bb3fc4e31215f
Commit By: tlyu
Revision: 24705
Changed Files:
U trunk/src/kdc/do_as_req.c

# Tue Mar 15 17:47:20 2011 tlyu (Taylor Yu) - Requestor tlyu (Taylor Yu) added

# Tue Mar 15 17:47:20 2011 tlyu (Taylor Yu) - Status changed from 'new' to 'review'

# Tue Mar 15 17:47:20 2011 tlyu (Taylor Yu) - Tags pullup added

# Tue Mar 15 17:47:20 2011 tlyu (Taylor Yu) - Target_Version 1.9.1 added

# Tue Mar 15 19:26:53 2011 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Tue Mar 15 19:26:53 2011 tlyu (Taylor Yu) - Version_Fixed 1.9.1 added

# Tue Mar 15 19:26:53 2011 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 573B

pull up r24705 from trunk

------------------------------------------------------------------------
r24705 | tlyu | 2011-03-15 17:47:19 -0400 (Tue, 15 Mar 2011) | 8 lines

ticket: 6881
subject: KDC double-free when PKINIT enabled [MITKRB5-SA-2011-003 CVE-2011-0284]
tags: pullup
target_version: 1.9.1

Fix a double-free condition in the KDC that can occur during an
AS-REQ when PKINIT is enabled.

https://github.com/krb5/krb5/commit/a28b7e762ae6778b3b683db4eea777cd9ebc4e4b
Commit By: tlyu
Revision: 24706
Changed Files:
U branches/krb5-1-9/src/kdc/do_as_req.c

# Wed Dec 16 18:02:56 2015 tlyu (Taylor Yu) - CustomField pullup deleted