[krbdev.mit.edu #9150] [Comment] libdb2 does not adequately validate hash metadata

"Greg Hudson via RT" <[email protected]> Sat, 23 Nov 2024 17:01:31 -0500
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <rt-4.4.3-2-1174675-1732399291-728.9150-8-0@kerborg-prod-app-1.mit.edu>
http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9150
This is a comment.  It is not sent to the Requestor(s):

Another static analysis result noted that hash_page.c:__split_page() obtains a
page at line 410 with __get_page(), which can return NULL, but doesn't check
the result and dereferences it unconditionally at line 413.