oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: validate sname in TGS-REQ

Browse Source 
In tgs_build_reply(), validate the server name in the TGS-REQ is present before
dereferencing.
This commit is contained in:
Luke Howard
2021-08-27 11:42:48 +10:00
parent a5378daa6c
commit 0417114794
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kdc/krb5tgs.c
View File

@@ -1699,6 +1699,10 @@ tgs_build_reply(astgs_request_t priv,
s = &adtkt.cname; s = &adtkt.cname;
r = adtkt.crealm; r = adtkt.crealm;
} else if (s == NULL) {
ret = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
_kdc_set_e_text(r, "No server in request");
goto out;
} }
_krb5_principalname2krb5_principal(context, &sp, *s, r); _krb5_principalname2krb5_principal(context, &sp, *s, r);