HomeFreeBSD

security/heimdal: Fix uninitialized pointer dereference

Description

security/heimdal: Fix uninitialized pointer dereference

krb5_ret_preincipal() returns a non-zero return code when
a garbage principal is passed to it. Unfortunately ret_principal_ent()
does not check the return code, with garbage pointing to what would
have been the principal. This results in a segfault when free() is
called.

PR: 267944, 267972
Reported by: Robert Morris <rtm@lcs.mit.edu>
MFH: 2024Q1

Details

Provenance
cyAuthored on Nov 26 2022, 4:27 PM
Parents
R11:64f7f98bb619: security/heimdal: Fix build
Branches
Unknown
Tags
Unknown