]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix OTP preauth crash with null prompter
authorAlexander Bokovoy <abokovoy@redhat.com>
Sun, 19 Oct 2025 15:14:29 +0000 (18:14 +0300)
committerGreg Hudson <ghudson@mit.edu>
Thu, 23 Oct 2025 21:02:11 +0000 (17:02 -0400)
commitca97bf697ab1561af1fbd12f5fd13466ec35a962
treebdeaed947a30aef6720b98399397f00c01fd76c5
parent4e5d98464e83fd90faa55c2e11bec813a28c89ee
Fix OTP preauth crash with null prompter

In doprompt(), check if the caller provided a prompter before
dereferencing it.  Similar code returns either EIO or
KRB5_LIBOS_CANTREADPWD; use EIO for this case as OTP preauth prompts
for a PIN and not a Kerberos password.

[ghudson@mit.edu: edited commit message]

ticket: 9186 (new)
src/lib/krb5/krb/preauth_otp.c