]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow null keyblocks in IOV checksum functions 1382/head
authorGreg Hudson <ghudson@mit.edu>
Sun, 20 Oct 2024 06:09:26 +0000 (02:09 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 22 Oct 2024 18:31:22 +0000 (14:31 -0400)
commit6217454323b39cedb1b03ac161ecb0ade3ad84e6
tree711e91becb291728caf80fb89dc633c571486837
parentbba0c36394cb88265da6e3d6566dd88b9c7978ca
Allow null keyblocks in IOV checksum functions

Null keyblocks are allowed by the libk5crypto checksum functions when
the checksum type is not keyed.  However, krb5_c_make_checksum_iov()
and krb5_c_verify_checksum_iov() crash on null keyblock inputs because
they do not check before converting to krb5_key as their non-IOV
variants do.  Add the missing null checks.

ticket: 9146 (new)
src/lib/crypto/krb/make_checksum_iov.c
src/lib/crypto/krb/verify_checksum_iov.c