Ticket History #7912: Fix invalid JSON handling in KDC OTP module

# Mon May 19 10:18:44 2014 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 565B

Fix invalid JSON handling in KDC OTP module

If the OTP configuration for a principal contains invalid JSON, the
KDC OTP module calls k5_json_get_tid on a null pointer, causing the
KDC process to crash. Fix this bug by checking the return value of
k5_json_decode in decode_config_json.

https://github.com/krb5/krb5/commit/dab1c234e15afdc64dfe776bdbc65bbc17d07e12
Author: Greg Hudson <ghudson@mit.edu>
Commit: dab1c234e15afdc64dfe776bdbc65bbc17d07e12
Branch: master
src/plugins/preauth/otp/otp_state.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)

# Mon May 19 10:18:45 2014 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Mon May 19 10:18:45 2014 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'

# Mon May 19 10:18:45 2014 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Mon May 19 10:18:45 2014 ghudson@mit.edu (Greg Hudson) - Target_Version 1.12.2 added

# Fri Jun 27 12:34:50 2014 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Fri Jun 27 12:34:50 2014 tlyu (Taylor Yu) - Version_Fixed 1.12.2 added

# Fri Jun 27 12:34:50 2014 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 671B

Fix invalid JSON handling in KDC OTP module

If the OTP configuration for a principal contains invalid JSON, the
KDC OTP module calls k5_json_get_tid on a null pointer, causing the
KDC process to crash. Fix this bug by checking the return value of
k5_json_decode in decode_config_json.

(cherry picked from commit dab1c234e15afdc64dfe776bdbc65bbc17d07e12)

https://github.com/krb5/krb5/commit/e52d893ec6701006bbf390856bf94bfe8da7c483
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: e52d893ec6701006bbf390856bf94bfe8da7c483
Branch: krb5-1.12
src/plugins/preauth/otp/otp_state.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)

# Wed Dec 16 18:03:02 2015 tlyu (Taylor Yu) - CustomField pullup deleted