s3-libsmb: Initialise ticket to ensure we do not invalid memory

The free is however a talloc_free(), which has additional protection against
freeing the wrong thing.

Andrew Bartlett

Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar  2 01:45:19 CET 2012 on sn-devel-104
(cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178)

Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory.
(cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3e8888c5a4a6)
(cherry picked from commit 8013e2e96fd54446584cb91c0120acf41d9e8d46)

diff --git a/source3/libsmb/clispnego.c b/source3/libsmb/clispnego.c
index 49b484b56c2405fc69198c2644da46412f38d497..3200380b26bd01233b9eeb83c89b6b5f3c362b63 100644 (file)
--- a/source3/libsmb/clispnego.c
+++ b/source3/libsmb/clispnego.c
@@ -387,6 +387,7 @@ bool spnego_parse_krb5_wrap(DATA_BLOB blob, DATA_BLOB *ticket, uint8 tok_id[2])
        bool ret;
        ASN1_DATA *data;
        int data_remaining;
+       *ticket = data_blob_null;
 
        data = asn1_init(talloc_tos());
        if (data == NULL) {