]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix IAKERB accept_sec_context null pointer crash 1416/head
authorAlexander Bokovoy <abokovoy@redhat.com>
Fri, 21 Mar 2025 07:52:47 +0000 (09:52 +0200)
committerGreg Hudson <ghudson@mit.edu>
Tue, 25 Mar 2025 15:26:20 +0000 (11:26 -0400)
commitf0230605c4ffe475e158d1a4ab17ed2c7f4c6189
tree192dcf02a2f94183196a119416aa3e0723947048
parentcc3511f66de78a955d0bd50d3f5bf2662bd3eda8
Fix IAKERB accept_sec_context null pointer crash

When iakerb_gss_accept_sec_context() processes an initial token which
is not an IAKERB token (because the client already has a service
ticket), set *context_handle.  Otherwise subsequent GSS calls using
this context will dereference a null pointer and crash.

[ghudson@mit.edu: moved fix to cleanup handler to avoid code
duplication; added tests; rewrote commit message]

ticket: 9168 (new)
src/appl/gss-sample/t_gss_sample.py
src/lib/gssapi/krb5/iakerb.c