Ticket History #9107: In PKINIT, check for null PKCS7 enveloped fields

# Thu Nov 30 17:19:04 2023 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 551B

In PKINIT, check for null PKCS7 enveloped fields

The PKCS7 ContentInfo content field and EncryptedContentInfo
encryptedContent field are optional. Check for null values in
cms_envelopeddata_verify() before calling pkcs7_decrypt(). Reported
by Bahaa Naamneh.

https://github.com/krb5/krb5/commit/48ccd81656381522d1f9ccb8705c13f0266a46ab
Author: Greg Hudson <ghudson@mit.edu>
Commit: 48ccd81656381522d1f9ccb8705c13f0266a46ab
Branch: master
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)

# Thu Nov 30 17:19:04 2023 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Thu Nov 30 17:19:04 2023 ghudson@mit.edu (Greg Hudson) - Target_Version 1.21-next added

# Thu Nov 30 17:19:04 2023 ghudson@mit.edu (Greg Hudson) - Target_Version 1.20-next added

# Thu Nov 30 17:19:05 2023 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Thu Nov 30 17:19:05 2023 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'resolved'

# Mon Jun 24 19:51:08 2024 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.21.3 added

# Mon Jun 24 19:51:08 2024 ghudson@mit.edu (Greg Hudson) - Correspondence added

Subject:	git commit
From:	ghudson@mit.edu

Download (untitled) / with headers
text/plain 624B

In PKINIT, check for null PKCS7 enveloped fields

The PKCS7 ContentInfo content field and EncryptedContentInfo
encryptedContent field are optional. Check for null values in
cms_envelopeddata_verify() before calling pkcs7_decrypt(). Reported
by Bahaa Naamneh.

(cherry picked from commit 48ccd81656381522d1f9ccb8705c13f0266a46ab)

https://github.com/krb5/krb5/commit/5cbfb6366f6c07903e67c87db0144d280717cf0c
Author: Greg Hudson <ghudson@mit.edu>
Commit: 5cbfb6366f6c07903e67c87db0144d280717cf0c
Branch: krb5-1.21
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)

# Wed Jun 26 12:57:59 2024 ghudson@mit.edu (Greg Hudson) - Tags pullup deleted