]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix potential PAC processing crash 1378/head
authorArjun <pkillarjun@protonmail.com>
Fri, 11 Oct 2024 03:22:52 +0000 (08:52 +0530)
committerGreg Hudson <ghudson@mit.edu>
Mon, 14 Oct 2024 16:29:42 +0000 (12:29 -0400)
commit331e393c6def46c00b6b54e1b2a0d1080c2af9e0
tree2fade633dcc3c6a4efa327cadd50b00646c6747a
parentc03ac354436a7182962b4987d318a86cb7ac558b
Fix potential PAC processing crash

An input to krb5_pac_parse() with a zero-length buffer at the end of
the PAC can cause an assertion failure in k5_pac_locate_buffer() due
to an off-by-one error.  Correct the assertion.

[ghudson@mit.edu: edited commit message]

ticket: 9144 (new)
tags: pullup
target_version: 1.21-next
src/lib/krb5/krb/pac.c