[krbdev.mit.edu #9168] git commit

"Greg Hudson via RT" <[email protected]> Tue, 25 Mar 2025 14:45:21 -0400

Newsgroups	gmane.comp.encryption.kerberos.bugs
Message-ID	<[email protected]>

Tue Mar 25 14:45:21 2025: Request 9168 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9168 >



Fix IAKERB accept_sec_context null pointer crash

When iakerb_gss_accept_sec_context() processes an initial token which
is not an IAKERB token (because the client already has a service
ticket), set *context_handle.  Otherwise subsequent GSS calls using
this context will dereference a null pointer and crash.

[[email protected]: moved fix to cleanup handler to avoid code
duplication; added tests; rewrote commit message]

https://github.com/krb5/krb5/commit/f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Author: Alexander Bokovoy <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: f0230605c4ffe475e158d1a4ab17ed2c7f4c6189
Branch: master
 src/appl/gss-sample/t_gss_sample.py |  7 +++++++
 src/lib/gssapi/krb5/iakerb.c        | 18 +++++++++---------
 2 files changed, 16 insertions(+), 9 deletions(-)