From: Stephan Bosch <stephan.bosch@open-xchange.com>
Date: Thu, 7 Aug 2025 03:33:14 +0000 (+0200)
Subject: auth: mech-gssapi - Make sure service credentials are initialized before trying to... 
X-Git-Tag: 2.4.2~350
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0dccc7a964bfcc79af9e2dfde958b22d7d8ffebd;p=thirdparty%2Fdovecot%2Fcore.git

auth: mech-gssapi - Make sure service credentials are initialized before trying to free them

This may cause a segfault in later changes.
---

diff --git a/src/auth/mech-gssapi.c b/src/auth/mech-gssapi.c
index 4ff5716528..f615f1dc48 100644
--- a/src/auth/mech-gssapi.c
+++ b/src/auth/mech-gssapi.c
@@ -691,7 +691,10 @@ mech_gssapi_auth_free(struct auth_request *request)
 					     GSS_C_NO_BUFFER);
 	}
 
-	(void)gss_release_cred(&minor_status, &gssapi_request->service_cred);
+	if (gssapi_request->service_cred != GSS_C_NO_CREDENTIAL) {
+		(void)gss_release_cred(&minor_status,
+				       &gssapi_request->service_cred);
+	}
 	if (gssapi_request->authn_name != GSS_C_NO_NAME) {
 		(void)gss_release_name(&minor_status,
 				       &gssapi_request->authn_name);