projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ac77dcb) | patch
krb5_server_decrypt_ticket_keytab wrongly succeeds
authorGreg Hudson <ghudson@mit.edu>
Tue, 13 Dec 2011 00:53:56 +0000 (00:53 +0000)
committerGreg Hudson <ghudson@mit.edu>
Tue, 13 Dec 2011 00:53:56 +0000 (00:53 +0000)
commitb531f40581f6b871c08643a0e9ef11f632de0363
treeba95068572f17bd749d46bbf37031d4c73b5279dtree | snapshot
parentac77dcbfd828840112cd6a172a802835c4f917f4commit | diff
krb5_server_decrypt_ticket_keytab wrongly succeeds

If krb5_server_decrypt_ticket_keytab doesn't find a key of the
appropriate enctype in an iterable keytab, it returns 0 (without
decrypting the ticket) due to a misplaced initialization of retval.
This bug causes kinit -k to claim "keytab entry valid" when it
shouldn't.  Reported by mark@mproehl.net.

ticket: 7051

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25584 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/srv_dec_tkt.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.