pull up r23912 from trunk
authorTom Yu <tlyu@mit.edu>
Tue, 20 Apr 2010 22:37:22 +0000 (22:37 +0000)
committerTom Yu <tlyu@mit.edu>
Tue, 20 Apr 2010 22:37:22 +0000 (22:37 +0000)
commit6a1856417d804fb7afe2cae3688c540b411ffbe6
tree9ce6b0a942bf3c022b79b736e8bf123a503aa84d
parent4159a795d8996138ed6cfdabf0729eca715431a3
pull up r23912 from trunk

 ------------------------------------------------------------------------
 r23912 | tlyu | 2010-04-20 17:12:10 -0400 (Tue, 20 Apr 2010) | 11 lines

 ticket: 6702
 target_version: 1.8.2
 tags: pullup

 Fix CVE-2010-1230 (MITKRB5-SA-2010-004) double-free in KDC triggered
 by ticket renewal.  Add a test case.

 See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490

 Thanks to Joel Johnson and Brian Almeida for the reports.

ticket: 6702
version_fixed: 1.8.2
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-8@23914 dc483132-0cff-0310-8789-dd5450dbe970
src/kdc/do_tgs_req.c
src/tests/dejagnu/config/default.exp
src/tests/dejagnu/krb-standalone/standalone.exp