krb5_get_next() and krb5_get_cache_next() do not check for krb5_kcm_call() returning non-zero before accessing the repsonse data; they only handle the case where the return value is KRB5_CC_END. Return immediately if the return value of krb5_kcm_call() is not KRB5_CC_END or 0. This was fixed in the Apple code.
27 KiB
27 KiB