From dcad51bc13c9b716d9a66248bcc4038c071ff158 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 10 Jun 2015 09:32:34 +0100 Subject: [PATCH] Fix Kerberos issue in ssl_session_dup The fix for CVE-2015-1791 introduced an error in ssl_session_dup for Kerberos. Reviewed-by: Tim Hudson --- ssl/ssl_sess.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c index ca5d2d656e..5358f4a93a 100644 --- a/ssl/ssl_sess.c +++ b/ssl/ssl_sess.c @@ -242,7 +242,7 @@ SSL_SESSION *ssl_session_dup(SSL_SESSION *src, int ticket) memcpy(dest, src, sizeof(*dest)); #ifndef OPENSSL_NO_KRB5 - dest->krb5_client_princ_len = dest->krb5_client_princ_len; + dest->krb5_client_princ_len = src->krb5_client_princ_len; if (src->krb5_client_princ_len > 0) memcpy(dest->krb5_client_princ, src->krb5_client_princ, src->krb5_client_princ_len); -- 2.25.1