[krbdev.mit.edu #9211] git commit

Mon May 18 21:25:50 2026: Request 9211 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9211 >



Avoid null dereference in krb5_rd_cred()

A malformed KRB-CRED message may have fewer entries in the encrypted
ticket-info list than it has in the tickets list.  In each loop
iteration, check if we unexpectedly reached the end of the ticket-info
list to avoid a null dereference.

[[email protected]: added comment; rewrote commit message]

https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
Author: TristanInSec <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 48afa9abb89ab2176bb20624d87d010b9984fc08
Branch: master
 src/lib/krb5/krb/rd_cred.c | 5 +++++
 1 file changed, 5 insertions(+)