From 8013e2e96fd54446584cb91c0120acf41d9e8d46 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 1 Mar 2012 16:55:04 +1100 Subject: [PATCH] s3-libsmb: Initialise ticket to ensure we do not invalid memory The free is however a talloc_free(), which has additional protection against freeing the wrong thing. Andrew Bartlett Signed-off-by: Jeremy Allison Autobuild-User: Jeremy Allison Autobuild-Date: Fri Mar 2 01:45:19 CET 2012 on sn-devel-104 (cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178) Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory. (cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3e8888c5a4a6) --- source3/libsmb/clispnego.c | 1 + 1 file changed, 1 insertion(+) diff --git a/source3/libsmb/clispnego.c b/source3/libsmb/clispnego.c index 49b484b56c2..3200380b26b 100644 --- a/source3/libsmb/clispnego.c +++ b/source3/libsmb/clispnego.c @@ -387,6 +387,7 @@ bool spnego_parse_krb5_wrap(DATA_BLOB blob, DATA_BLOB *ticket, uint8 tok_id[2]) bool ret; ASN1_DATA *data; int data_remaining; + *ticket = data_blob_null; data = asn1_init(talloc_tos()); if (data == NULL) { -- 2.34.1