[krbdev.mit.edu #9220] git commit

"Greg Hudson via RT" <[email protected]> Fri, 10 Jul 2026 23:25:33 -0400
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
Fri Jul 10 23:25:33 2026: Request 9220 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9220 >



Check for empty forwarded creds in krb5 GSS mech

In rd_and_store_for_creds(), do not dereference the first element of
the forwarded credential list if it is empty.  In addition, if an
application passes a null delegated_cred_handle to
gss_accept_sec_context(), do not call krb5_rd_cred() in the krb5 GSS
mech.

https://github.com/krb5/krb5/commit/690cbe7d9b6d095cbeb77fe3e4d0c910f97bbb3e
Author: Greg Hudson <[email protected]>
Commit: 690cbe7d9b6d095cbeb77fe3e4d0c910f97bbb3e
Branch: master
 src/lib/gssapi/krb5/accept_sec_context.c | 70 +++++++++++++-------------------
 1 file changed, 29 insertions(+), 41 deletions(-)