diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2012-03-01 16:55:04 +1100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2012-10-15 11:27:58 +0200 |
| commit | 8013e2e96fd54446584cb91c0120acf41d9e8d46 (patch) | |
| tree | b8a4d930d1e06b6842664760e690894dac46a0e6 | |
| parent | f156a357e6af0aaa6b1bcddc521761d43409e70f (diff) | |
| download | samba-8013e2e96fd54446584cb91c0120acf41d9e8d46.tar.gz | |
s3-libsmb: Initialise ticket to ensure we do not invalid memory
The free is however a talloc_free(), which has additional protection against
freeing the wrong thing.
Andrew Bartlett
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar 2 01:45:19 CET 2012 on sn-devel-104
(cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178)
Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory.
(cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3e8888c5a4a6)
| -rw-r--r-- | source3/libsmb/clispnego.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/libsmb/clispnego.c b/source3/libsmb/clispnego.c index 49b484b56c2..3200380b26b 100644 --- a/source3/libsmb/clispnego.c +++ b/source3/libsmb/clispnego.c @@ -387,6 +387,7 @@ bool spnego_parse_krb5_wrap(DATA_BLOB blob, DATA_BLOB *ticket, uint8 tok_id[2]) bool ret; ASN1_DATA *data; int data_remaining; + *ticket = data_blob_null; data = asn1_init(talloc_tos()); if (data == NULL) { |