[krbdev.mit.edu #9144] git commit

"Greg Hudson via RT" <[email protected]> Mon, 04 Aug 2025 18:32:15 -0400
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9144 >


Fix potential PAC processing crash

An input to krb5_pac_parse() with a zero-length buffer at the end of
the PAC can cause an assertion failure in k5_pac_locate_buffer() due
to an off-by-one error.  Correct the assertion.

[[email protected]: edited commit message]

(cherry picked from commit 331e393c6def46c00b6b54e1b2a0d1080c2af9e0)

https://github.com/krb5/krb5/commit/79b244de8be6902a4af2c78e6619a815a1df8722
Author: Arjun <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 79b244de8be6902a4af2c78e6619a815a1df8722
Branch: krb5-1.21
 src/lib/krb5/krb/pac.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)