]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix CVE-2010-1230 (MITKRB5-SA-2010-004) double-free in KDC triggered
authorTom Yu <tlyu@mit.edu>
Tue, 20 Apr 2010 21:12:10 +0000 (21:12 +0000)
committerTom Yu <tlyu@mit.edu>
Tue, 20 Apr 2010 21:12:10 +0000 (21:12 +0000)
commit04392a812b84527dcf7d4cebfa91ab9c69d7cc40
tree37ee2645f224b5061d5927d4d6d4b46ed025c012
parentbc2db93977370ba1935f2a3ca0cb2184b8c27a3a
Fix CVE-2010-1230 (MITKRB5-SA-2010-004) double-free in KDC triggered
by ticket renewal.  Add a test case.

See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490

Thanks to Joel Johnson and Brian Almeida for the reports.

ticket: 6702
target_version: 1.8.2
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23912 dc483132-0cff-0310-8789-dd5450dbe970
src/kdc/do_tgs_req.c
src/tests/dejagnu/config/default.exp
src/tests/dejagnu/krb-standalone/standalone.exp