[krbdev.mit.edu #9150] [Comment] libdb2 does not adequately validate hash metadata
"Greg Hudson via RT" <[email protected]> Sat, 23 Nov 2024 17:01:31 -0500
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <rt-4.4.3-2-1174675-1732399291-728.9150-8-0@kerborg-prod-app-1.mit.edu> |
http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9150 This is a comment. It is not sent to the Requestor(s): Another static analysis result noted that hash_page.c:__split_page() obtains a page at line 410 with __get_page(), which can return NULL, but doesn't check the result and dereferences it unconditionally at line 413.