mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-19 00:13:33 +00:00
678bdaf21b
Fix a NULL dereference in _kadm5_s_init_context() when the client sends a mangled realm message. PR: 267912 Reported by: Robert Morris <rtm@lcs.mit.edu> MFH: 2022Q4
14 lines
520 B
C
14 lines
520 B
C
--- kadmin/server.c.orig 2022-09-15 16:54:19.000000000 -0700
|
|
+++ kadmin/server.c 2022-11-24 08:26:55.919761000 -0800
|
|
@@ -787,7 +787,9 @@
|
|
ret = krb5_read_priv_message(contextp, ac, &fd, ¶ms);
|
|
if(ret)
|
|
krb5_err(contextp, 1, ret, "krb5_read_priv_message");
|
|
- _kadm5_unmarshal_params(contextp, ¶ms, &realm_params);
|
|
+ ret = _kadm5_unmarshal_params(contextp, ¶ms, &realm_params);
|
|
+ if(ret)
|
|
+ krb5_err(contextp, 1, ret, "_kadm5_unmarshal_params");
|
|
}
|
|
|
|
initial = ticket->ticket.flags.initial;
|