[Heimdal-source-changes] [heimdal/heimdal] 1a6a6e: Security: Avoid NULL structure pointer member dere...

Ons Dec 6 00:57:20 CET 2017

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 1a6a6e462dc2ac6111f9e02c6852ddec4849b887
      https://github.com/heimdal/heimdal/commit/1a6a6e462dc2ac6111f9e02c6852ddec4849b887
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-12-05 (Tue, 05 Dec 2017)

  Changed paths:
    M kdc/kerberos5.c

  Log Message:
  -----------
  Security: Avoid NULL structure pointer member dereference

This can happen in the error path when processing malformed AS
requests with a NULL client name.  Bug originally introduced on
Fri Feb 13 09:26:01 2015 +0100 in commit:

    a873e21d7c06f22943a90a41dc733ae76799390d

    kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()

Original patch by Jeffrey Altman <jaltman at secure-endpoints.com>