pull up r22176 from trunk
authorTom Yu <tlyu@mit.edu>
Wed, 15 Apr 2009 20:07:34 +0000 (20:07 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 15 Apr 2009 20:07:34 +0000 (20:07 +0000)
commit97e0daf65d3329832e6319910cca966f340857a8
treea0302b391d54ac8e9cfb479f448b63f0dc900d3a
parent20e2c2c5443fcb7ad2711e71ed10af9bb9840fbe
pull up r22176 from trunk

 ------------------------------------------------------------------------
 r22176 | tlyu | 2009-04-07 17:22:23 -0400 (Tue, 07 Apr 2009) | 7 lines
 Changed paths:
    M /trunk/src/lib/krb5/asn.1/asn1_decode.c
    M /trunk/src/tests/asn.1/krb5_decode_test.c

 ticket: 6445
 subject: CVE-2009-0846 asn1_decode_generaltime can free uninitialized pointer
 tags: pullup
 target_version: 1.7

 The asn1_decode_generaltime() function can free an uninitialized
 pointer if asn1buf_remove_charstring() fails.

ticket: 6445
version_fixed: 1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22250 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/asn.1/asn1_decode.c
src/tests/asn.1/krb5_decode_test.c