gsskrb5: Fix NULL deref in init_sec_context

2023-01-02 20:34:13 -06:00
parent 27e5c40a79
commit 67c35bc1ca
1 changed files with 3 additions and 0 deletions
--- a/lib/gssapi/krb5/init_sec_context.c
+++ b/lib/gssapi/krb5/init_sec_context.c
@@ -742,6 +742,9 @@ repl_mutual
    output_token->length = 0;
    output_token->value = NULL;

+    if (input_token == GSS_C_NO_BUFFER)
+        return GSS_S_FAILURE;
+
    if (actual_mech_type)
 	*actual_mech_type = GSS_KRB5_MECHANISM;