From: Andrew Bartlett <abartlet@samba.org>
Date: Thu, 1 Mar 2012 05:55:04 +0000 (+1100)
Subject: s3-libsmb: Initialise ticket to ensure we do not invalid memory
X-Git-Url: http://git.samba.org/?p=samba.git;a=commitdiff_plain;h=8013e2e96fd54446584cb91c0120acf41d9e8d46

s3-libsmb: Initialise ticket to ensure we do not invalid memory

The free is however a talloc_free(), which has additional protection against
freeing the wrong thing.

Andrew Bartlett

Signed-off-by: Jeremy Allison <jra@samba.org>

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar  2 01:45:19 CET 2012 on sn-devel-104
(cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178)

Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory.
(cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3e8888c5a4a6)
---

diff --git a/source3/libsmb/clispnego.c b/source3/libsmb/clispnego.c
index 49b484b56c2..3200380b26b 100644
--- a/source3/libsmb/clispnego.c
+++ b/source3/libsmb/clispnego.c
@@ -387,6 +387,7 @@ bool spnego_parse_krb5_wrap(DATA_BLOB blob, DATA_BLOB *ticket, uint8 tok_id[2])
 	bool ret;
 	ASN1_DATA *data;
 	int data_remaining;
+	*ticket = data_blob_null;
 
 	data = asn1_init(talloc_tos());
 	if (data == NULL) {