[krbdev.mit.edu #9107] git commit
"Greg Hudson via RT" <[email protected]> Thu, 30 Nov 2023 17:19:04 -0500
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Thu Nov 30 17:19:04 2023: Request 9107 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9107 > In PKINIT, check for null PKCS7 enveloped fields The PKCS7 ContentInfo content field and EncryptedContentInfo encryptedContent field are optional. Check for null values in cms_envelopeddata_verify() before calling pkcs7_decrypt(). Reported by Bahaa Naamneh. https://github.com/krb5/krb5/commit/48ccd81656381522d1f9ccb8705c13f0266a46ab Author: Greg Hudson <[email protected]> Commit: 48ccd81656381522d1f9ccb8705c13f0266a46ab Branch: master src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)