diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2012-03-01 16:55:04 +1100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2012-11-01 09:10:37 +0100 |
| commit | 41d3ec2ed53d45128d13483ef6920c21839d8250 (patch) | |
| tree | ccc20225b6475aca816688d409f9b4db0bfde09b | |
| parent | a812254ce8bbe67234a185054661e6c2f01b1134 (diff) | |
| download | samba-41d3ec2ed53d45128d13483ef6920c21839d8250.tar.gz | |
s3-libsmb: Initialise ticket to ensure we do not invalid memory
The free is however a talloc_free(), which has additional protection against
freeing the wrong thing.
Andrew Bartlett
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar 2 01:45:19 CET 2012 on sn-devel-104
(cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178)
Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory.
(cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3e8888c5a4a6)
(cherry picked from commit 8013e2e96fd54446584cb91c0120acf41d9e8d46)
| -rw-r--r-- | source3/libsmb/clispnego.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/libsmb/clispnego.c b/source3/libsmb/clispnego.c index 49b484b56c2..3200380b26b 100644 --- a/source3/libsmb/clispnego.c +++ b/source3/libsmb/clispnego.c @@ -387,6 +387,7 @@ bool spnego_parse_krb5_wrap(DATA_BLOB blob, DATA_BLOB *ticket, uint8 tok_id[2]) bool ret; ASN1_DATA *data; int data_remaining; + *ticket = data_blob_null; data = asn1_init(talloc_tos()); if (data == NULL) { |