Cyrus SASL 2.1.25 gssapi dereferences null pointer

Phil Pennock cyrus-sasl-phil at spodhuis.org
Sat Jan 7 18:51:31 EST 2012


On 2012-01-07 at 13:10 -0700, Matthew Hardin wrote:
> In sasl 2.1.25 gssapi module dumps core during gssapi authentication for OpenLDAP:
> 
> Analysis:
> 
> At line 373 in plugins/gssapi.c, function sasl_gss_encode declares *p
> and sets it at the same time to text->encode_buf. The problem is that

I reported this on 2011-10-06 and the patch was committed to the
repository by a maintainer at that time.
-- 
https://twitter.com/syscomet


More information about the Cyrus-sasl mailing list