projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 99f4ad4) | patch
pull up r24056 from trunk
authorTom Yu <tlyu@mit.edu>
Wed, 19 May 2010 18:52:54 +0000 (18:52 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 19 May 2010 18:52:54 +0000 (18:52 +0000)
commitf13587dd881b1df5cd613a0957116023c159f77e
tree9d39f3c66ac5eff312e6824914c1b772b83980ectree | snapshot
parent99f4ad4dc904866ffde023cc0169ffddb07bd823commit | diff
pull up r24056 from trunk

 ------------------------------------------------------------------------
 r24056 | tlyu | 2010-05-19 14:09:37 -0400 (Wed, 19 May 2010) | 8 lines

 ticket: 6725
 subject: CVE-2010-1321 GSS-API lib null pointer deref (MITKRB5-SA-2010-005)
 tags: pullup
 target_version: 1.8.2

 Make krb5_gss_accept_sec_context() check for a null authenticator
 checksum pointer before attempting to dereference it.

ticket: 6725
version_fixed: 1.8.2
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-8@24063 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/gssapi/krb5/accept_sec_context.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.