oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: Check errors from krb5_auth_con_getauthenticator()

Browse Source
This commit is contained in:
Nicolas Williams
2022-01-18 00:32:23 -06:00
parent 4ed4f2159c
commit fcba7a9fd1
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
kdc/krb5tgs.c
View File

@@ -810,7 +810,12 @@ tgs_check_authenticator(krb5_context context,
krb5_error_code ret; krb5_error_code ret;
krb5_crypto crypto; krb5_crypto crypto;
krb5_auth_con_getauthenticator(context, ac, &auth); ret = krb5_auth_con_getauthenticator(context, ac, &auth);
if (ret) {
kdc_log(context, config, 2,
"Out of memory checking PA-TGS Authenticator");
goto out;
}
if(auth->cksum == NULL){ if(auth->cksum == NULL){
kdc_log(context, config, 4, "No authenticator in request"); kdc_log(context, config, 4, "No authenticator in request");
ret = KRB5KRB_AP_ERR_INAPP_CKSUM; ret = KRB5KRB_AP_ERR_INAPP_CKSUM;