misc/117349: gss_acquire_cred can crash if _gss_mech_oids has not been initialized

Nathan Whitehorn nwhitehorn at physics.wisc.edu
Fri Oct 19 19:30:04 PDT 2007


The following reply was made to PR misc/117349; it has been noted by GNATS.

From: Nathan Whitehorn <nwhitehorn at physics.wisc.edu>
To: bug-followup at FreeBSD.org,  nathanw at uchicago.edu
Cc:  
Subject: Re: misc/117349: gss_acquire_cred can crash if _gss_mech_oids has
 not been initialized
Date: Fri, 19 Oct 2007 20:56:02 -0500

 The patch is backwards, of course. The correct patch is:
 
 --- gss_acquire_cred.c.dist 2007-10-19 20:12:26.000000000 -0500
 +++ gss_acquire_cred.c 2007-10-19 20:12:40.000000000 -0500
 @@ -59,6 +59,10 @@
 * First make sure that at least one of the requested
 * mechanisms is one that we support.
 */
 +
 + if (!_gss_mech_oids)
 + _gss_load_mech();
 +
 if (mechs) {
 _gss_load_mech();
 for (i = 0; i < mechs->count; i++)


More information about the freebsd-bugs mailing list