[krbdev.mit.edu #9219] git commit
"Greg Hudson via RT" <[email protected]> Thu, 11 Jun 2026 17:07:16 -0400
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Thu Jun 11 17:07:16 2026: Request 9219 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9219 > Avoid another null dereference in krb5_rd_cred() In RFC 4120, the ticket client and server principal names are optional in KrbCredInfo, but we have always required them to be present. Add checks to prevent null dereferences in krb5_rd_cred() if either name is not specified. [[email protected]: folded check in with the end-of-list check; rewrote comment and commit message] https://github.com/krb5/krb5/commit/5031b854ad8ba6cce20cdd8c991f81dbc3f924bd Author: Rahul Hoysala <[email protected]> Committer: Greg Hudson <[email protected]> Commit: 5031b854ad8ba6cce20cdd8c991f81dbc3f924bd Branch: master src/lib/krb5/krb/rd_cred.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-)