[krbdev.mit.edu #9150] [Comment] libdb2 does not adequately validate hash metadata

Greg Hudson via RT rt-comment at kerborg-prod-app-1.mit.edu
Sat Nov 23 17:01:31 EST 2024


http://mv.ezproxy.com.ezproxyberklee.flo.org/rt/Ticket/Display.html?id=9150
This is a comment.  It is not sent to the Requestor(s):

Another static analysis result noted that hash_page.c:__split_page() obtains a
page at line 410 with __get_page(), which can return NULL, but doesn't check
the result and dereferences it unconditionally at line 413.



More information about the krb5-bugs mailing list