|
 |
14f0285 |
From 9ca4f0e1081e667ebc9150097559f5fe85595e33 Mon Sep 17 00:00:00 2001
|
|
|
14f0285 |
From: Robbie Harwood <rharwood@redhat.com>
|
|
|
14f0285 |
Date: Tue, 23 Aug 2016 16:47:00 -0400
|
|
|
32ef372 |
Subject: [PATCH] krb5-1.12-api.patch
|
|
|
14f0285 |
|
|
|
a89bdde |
Reference docs don't define what happens if you call krb5_realm_compare() with
|
|
|
a89bdde |
malformed krb5_principal structures. Define a behavior which keeps it from
|
|
|
a89bdde |
crashing if applications don't check ahead of time.
|
|
|
14f0285 |
---
|
|
|
14f0285 |
src/lib/krb5/krb/princ_comp.c | 7 +++++++
|
|
|
14f0285 |
1 file changed, 7 insertions(+)
|
|
|
a89bdde |
|
|
|
14f0285 |
diff --git a/src/lib/krb5/krb/princ_comp.c b/src/lib/krb5/krb/princ_comp.c
|
|
|
14f0285 |
index a693610..0ed7883 100644
|
|
|
14f0285 |
--- a/src/lib/krb5/krb/princ_comp.c
|
|
|
14f0285 |
+++ b/src/lib/krb5/krb/princ_comp.c
|
|
|
14f0285 |
@@ -36,6 +36,10 @@ realm_compare_flags(krb5_context context,
|
|
|
a89bdde |
const krb5_data *realm1 = &princ1->realm;
|
|
|
a89bdde |
const krb5_data *realm2 = &princ2->realm;
|
|
|
a89bdde |
|
|
|
a89bdde |
+ if (princ1 == NULL || princ2 == NULL)
|
|
|
a89bdde |
+ return FALSE;
|
|
|
a89bdde |
+ if (realm1 == NULL || realm2 == NULL)
|
|
|
a89bdde |
+ return FALSE;
|
|
|
a89bdde |
if (realm1->length != realm2->length)
|
|
|
a89bdde |
return FALSE;
|
|
|
a89bdde |
if (realm1->length == 0)
|
|
|
14f0285 |
@@ -88,6 +92,9 @@ krb5_principal_compare_flags(krb5_context context,
|
|
|
a89bdde |
krb5_principal upn2 = NULL;
|
|
|
a89bdde |
krb5_boolean ret = FALSE;
|
|
|
a89bdde |
|
|
|
a89bdde |
+ if (princ1 == NULL || princ2 == NULL)
|
|
|
a89bdde |
+ return FALSE;
|
|
|
a89bdde |
+
|
|
|
a89bdde |
if (flags & KRB5_PRINCIPAL_COMPARE_ENTERPRISE) {
|
|
|
a89bdde |
/* Treat UPNs as if they were real principals */
|
|
|
a89bdde |
if (princ1->type == KRB5_NT_ENTERPRISE_PRINCIPAL) {
|
|
|
14f0285 |
--
|
|
|
14f0285 |
2.9.3
|
|
|
14f0285 |
|