tags 563701 upstream fixed-upstream
thanks

Garrett Wollman <[email protected]> writes:

> With KRB5CCNAME set to a non-existent file, the following command:

> /usr/bin/k5start -K 60 -o www-data -g root -b -p /var/run/k5start.pid -t -f 
> /etc/apache2/keytab -U 

> segfaults in file_permissions() because the ccache argument is a null
> pointer.  Explicitly specifying the ccache with the -k flag works around
> the bug.

This problem was embarassingly simple.

--- a/k5start.c
+++ b/k5start.c
@@ -496,7 +496,7 @@ main(int argc, char *argv[])
     }
     if (cache == NULL) {
         code = krb5_cc_default(ctx, &options.ccache);
-        if (code != 0)
+        if (code == 0)
             cache = krb5_cc_get_name(ctx, options.ccache);
     } else {
         if (setenv("KRB5CCNAME", cache, 1) != 0)

Will be fixed in the next release, which should be soon.  Thanks!

-- 
Russ Allbery ([email protected])               <http://www.eyrie.org/~eagle/>



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to