>From 074c5d7ef22f9c092593876d5320ec7294e5e27a Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Tue, 14 Oct 2014 11:20:40 +0200 Subject: [PATCH 1/2] krb5: Check return value of krb5_principal_get_realm Function krb5_principal_get_realm can return NULL an it would case segfault in function strlen. --- src/util/sss_krb5.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c index 9eb34e17dc1059da9c346d4635a9f3e283308328..4e382ee60ecc3c78ec4d162d740470fe0bb429e1 100644 --- a/src/util/sss_krb5.c +++ b/src/util/sss_krb5.c @@ -758,8 +758,15 @@ void sss_krb5_get_init_creds_opt_set_canonicalize(krb5_get_init_creds_opt *opts, void sss_krb5_princ_realm(krb5_context context, krb5_const_principal princ, const char **realm, int *len) { - *realm = krb5_principal_get_realm(context, princ); - *len = strlen(*realm); + const char *realm_str = krb5_principal_get_realm(context, princ); + + if (realm_str != NULL) { + *realm = krb5_principal_get_realm(context, princ); + *len = strlen(*realm); + } else { + *realm = NULL; + *len = 0; + } } #else void sss_krb5_princ_realm(krb5_context context, krb5_const_principal princ, -- 2.1.0