Skip Menu |
 

History Show all quoted text — Show full headers
# Mon Jan 04 10:53:08 2016 ghudson@mit.edu (Greg Hudson) - Ticket created
From: ghudson@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 738B

Check context handle in gss_export_sec_context()

After commit 4f35b27a9ee38ca0b557ce8e6d059924a63d4eff, the
context_handle parameter in gss_export_sec_context() is dereferenced
before arguments are validated by val_exp_sec_ctx_args(). With a null
context_handle, the new code segfaults instead of failing gracefully.
Revert this part of the commit and only dereference context_handle if
it is non-null.

https://github.com/krb5/krb5/commit/b6f29cbd2ab132e336b5435447348400e9a9e241
Author: Tomas Kuthan <tkuthan@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: b6f29cbd2ab132e336b5435447348400e9a9e241
Branch: master
src/lib/gssapi/mechglue/g_exp_sec_context.c | 5 +++--
1 files changed, 3 insertions(+), 2 deletions(-)
# Mon Jan 04 10:53:08 2016 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added
# Mon Jan 04 10:53:08 2016 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'
# Mon Jan 04 10:53:08 2016 ghudson@mit.edu (Greg Hudson) - Tags pullup added
# Mon Jan 04 10:53:08 2016 ghudson@mit.edu (Greg Hudson) - Target_Version 1.12-next added
# Mon Jan 04 10:58:43 2016 ghudson@mit.edu (Greg Hudson) - Target_Version 1.14-next added
# Mon Jan 04 10:58:43 2016 ghudson@mit.edu (Greg Hudson) - Target_Version 1.13-next added
# Mon Jan 04 13:39:53 2016 tlyu (Taylor Yu) - CustomField 1.12-next deleted
# Thu Jan 07 16:28:12 2016 tlyu (Taylor Yu) - Version_Fixed 1.14.1 added
# Thu Jan 07 16:28:12 2016 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 803B

Check context handle in gss_export_sec_context()

After commit 4f35b27a9ee38ca0b557ce8e6d059924a63d4eff, the
context_handle parameter in gss_export_sec_context() is dereferenced
before arguments are validated by val_exp_sec_ctx_args(). With a null
context_handle, the new code segfaults instead of failing gracefully.
Revert this part of the commit and only dereference context_handle if
it is non-null.

(cherry picked from commit b6f29cbd2ab132e336b5435447348400e9a9e241)

https://github.com/krb5/krb5/commit/018f203ff88e8ffe187502a0e97824e697179f3a
Author: Tomas Kuthan <tkuthan@gmail.com>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 018f203ff88e8ffe187502a0e97824e697179f3a
Branch: krb5-1.14
src/lib/gssapi/mechglue/g_exp_sec_context.c | 5 +++--
1 files changed, 3 insertions(+), 2 deletions(-)
# Fri Jan 08 17:16:17 2016 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'
# Fri Jan 08 17:16:17 2016 tlyu (Taylor Yu) - Version_Fixed 1.13.4 added
# Fri Jan 08 17:16:17 2016 tlyu (Taylor Yu) - CustomField pullup deleted
# Fri Jan 08 17:16:17 2016 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 803B

Check context handle in gss_export_sec_context()

After commit 4f35b27a9ee38ca0b557ce8e6d059924a63d4eff, the
context_handle parameter in gss_export_sec_context() is dereferenced
before arguments are validated by val_exp_sec_ctx_args(). With a null
context_handle, the new code segfaults instead of failing gracefully.
Revert this part of the commit and only dereference context_handle if
it is non-null.

(cherry picked from commit b6f29cbd2ab132e336b5435447348400e9a9e241)

https://github.com/krb5/krb5/commit/b77b952da9ab4bbdb6430f102c0338166a99646c
Author: Tomas Kuthan <tkuthan@gmail.com>
Committer: Tom Yu <tlyu@mit.edu>
Commit: b77b952da9ab4bbdb6430f102c0338166a99646c
Branch: krb5-1.13
src/lib/gssapi/mechglue/g_exp_sec_context.c | 5 +++--
1 files changed, 3 insertions(+), 2 deletions(-)