Cyrus SASL 2.1.25 gssapi dereferences null pointer
Phil Pennock
cyrus-sasl-phil at spodhuis.org
Sat Jan 7 18:51:31 EST 2012
On 2012-01-07 at 13:10 -0700, Matthew Hardin wrote:
> In sasl 2.1.25 gssapi module dumps core during gssapi authentication for OpenLDAP:
>
> Analysis:
>
> At line 373 in plugins/gssapi.c, function sasl_gss_encode declares *p
> and sets it at the same time to text->encode_buf. The problem is that
I reported this on 2011-10-06 and the patch was committed to the
repository by a maintainer at that time.
--
https://twitter.com/syscomet
More information about the Cyrus-sasl
mailing list