projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d68398e) | patch
CVE-2009-0846 (1.6.x) asn1_decode_generaltime can free uninitialized pointer
authorTom Yu <tlyu@mit.edu>
Wed, 8 Apr 2009 01:23:03 +0000 (01:23 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 8 Apr 2009 01:23:03 +0000 (01:23 +0000)
commitea2a03d2fc914f062e25c0e8f8c2ddb08ff7adb0
treef38f6e7d0c143c0eb661d109912f7bfff81d1ea8tree | snapshot
parentd68398e122cfd6c3fc35ab54b3cbeed38ae1e6a9commit | diff
CVE-2009-0846 (1.6.x) asn1_decode_generaltime can free uninitialized pointer

pull up rxxxx from trunk

The asn1_decode_generaltime() function can free an uninitialized
pointer if asn1buf_remove_charstring() fails.

ticket: 6448
tags: pullup
target_version: 1.6.4
version_fixed: 1.6.4

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@22181 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/asn.1/asn1_decode.c diff | blob | history
src/tests/asn.1/krb5_decode_test.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.