3.0 alpha21 kerberos_verify.c problems on AIX 4.3

Andrew Bartlett abartlet at samba.org
Sat Jan 11 04:15:01 GMT 2003


On Sat, 2002-12-14 at 04:39, Nik Conwell wrote:
> 
> Samba 3.0, alpha 21.
> 
> kerberos_verify.c has:
> 
> 	... krb5_get_permitted_enctypes(context, &enctypes) ...
> 
> 	for (i=0;enctypes[i];i++) {
>                 ...
> 		if (!(ret = krb5_rd_req(context, &auth_context, &packet, 
> 				       NULL, keytab, NULL, &tkt))) {
> 			krb5_free_ktypes(context, enctypes);
>                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> 			break;
> 		}
> 	}
> 
> 	if (!enctypes[i]) {
>             ^^^^^^^^^^^^
> 		DEBUG(3,("krb5_rd_req with auth failed (%s)\n", 
> 			 error_message(ret)));
> 		return NT_STATUS_LOGON_FAILURE;
> 	}
> 
> 
> referencing enctypes[] after it's been freed.  Got away w/ the right memory crud
> under Linux, but on AIX (4.3) this sometimes caused (debug 3 and above):

Thanks for that - I've applied it to HEAD and will merge to 3.0 shortly.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030111/43fbd7ff/attachment.bin


More information about the samba-technical mailing list