This is an automated email from the git hooks/post-receive script.
simo pushed a change to branch master
in repository gssproxy.
from 4ac6451 Add configure option for build hardening
new 54171b1 Fix NULL deref in gssi_release_name()
new fca9a5a Fix NULL deref in gssi_release_cred()
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/src/mechglue/gpp_creds.c | 4 +++-
proxy/src/mechglue/gpp_import_and_canon_name.c | 2 +-
2 files changed, 4 insertions(+), 2 deletions(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
Show replies by date
This is an automated email from the git hooks/post-receive script.
simo pushed a commit to branch master
in repository gssproxy.
commit 54171b1aa2d4c51b57dca80fd6f8e4cb072b52e6
Author: Robbie Harwood <rharwood(a)redhat.com>
Date: Fri Sep 23 18:42:26 2016 +0000
Fix NULL deref in gssi_release_name()
Signed-off-by: Robbie Harwood <rharwood(a)redhat.com>
Reviewed-by: Simo Sorce <simo(a)redhat.com>
---
proxy/src/mechglue/gpp_import_and_canon_name.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/proxy/src/mechglue/gpp_import_and_canon_name.c
b/proxy/src/mechglue/gpp_import_and_canon_name.c
index 7842bcc..745be20 100644
--- a/proxy/src/mechglue/gpp_import_and_canon_name.c
+++ b/proxy/src/mechglue/gpp_import_and_canon_name.c
@@ -253,7 +253,7 @@ OM_uint32 gssi_release_name(OM_uint32 *minor_status,
GSSI_TRACE();
name = (struct gpp_name_handle *)*input_name;
- if (!name->local && !name->remote) {
+ if (!name || (!name->local && !name->remote)) {
return GSS_S_BAD_NAME;
}
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
This is an automated email from the git hooks/post-receive script.
simo pushed a commit to branch master
in repository gssproxy.
commit fca9a5adb76622015bb64d03b038ccdbf4525010
Author: Robbie Harwood <rharwood(a)redhat.com>
Date: Fri Sep 23 18:42:31 2016 +0000
Fix NULL deref in gssi_release_cred()
Signed-off-by: Robbie Harwood <rharwood(a)redhat.com>
Reviewed-by: Simo Sorce <simo(a)redhat.com>
Merges 32
---
proxy/src/mechglue/gpp_creds.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/proxy/src/mechglue/gpp_creds.c b/proxy/src/mechglue/gpp_creds.c
index ff1dfda..2818dd7 100644
--- a/proxy/src/mechglue/gpp_creds.c
+++ b/proxy/src/mechglue/gpp_creds.c
@@ -529,7 +529,9 @@ OM_uint32 gssi_release_cred(OM_uint32 *minor_status,
GSSI_TRACE();
- if (*cred_handle == GSS_C_NO_CREDENTIAL) {
+ if (cred_handle == NULL) {
+ return GSS_S_NO_CRED | GSS_S_CALL_INACCESSIBLE_READ;
+ } else if (*cred_handle == GSS_C_NO_CREDENTIAL) {
*minor_status = 0;
return GSS_S_COMPLETE;
}
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.