[krbdev.mit.edu #9201] git commit

Mon Mar 23 14:59:04 2026: Request 9201 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9201 >



Prevent read overrun in svc_auth_gssapi

In gssrpc__svcauth_gssapi(), check that the client handle length is at
least 4, to prevent an out-of-bounds read by get_client().

[[email protected]: combined length<4 check with length==0 check;
rewrote commit message]

https://github.com/krb5/krb5/commit/f8a0bee0a54ba0d96804631a3261ecd233051863
Author: Rahul Hoysala <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: f8a0bee0a54ba0d96804631a3261ecd233051863
Branch: master
 src/lib/rpc/svc_auth_gssapi.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)