projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1d65bc6) | patch
FAST negotiation could erroneously succeed
authorGreg Hudson <ghudson@mit.edu>
Tue, 25 May 2010 02:44:45 +0000 (02:44 +0000)
committerGreg Hudson <ghudson@mit.edu>
Tue, 25 May 2010 02:44:45 +0000 (02:44 +0000)
commitc7f5da582f3cdd08cd82b0c6a25167303575014b
tree1c9514740075b3963f39a952900fea1e7e608d81tree | snapshot
parent1d65bc6d55dad1e74b3df4d7133a2863e28e87a8commit | diff
FAST negotiation could erroneously succeed

When FAST negotiation is performed against an older KDC
(rep->enc_part2->flags & TKT_FLG_ENC_PA_REP not set),
krb5int_fast_verify_nego did not set the value of *fast_avail, causing
stack garbage to be used in init_creds_step_reply.  Initialize
*fast_avail at the beginning of the function per coding practices.

ticket: 6734
target_version: 1.8.2
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24102 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/fast.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.