Обсуждение: [PATCH] Fix crash during connect using SSPI auth

Hi,

I ran into a crash in psqlodbc driver on Windows while trying to connect
using SSPI authentication (both client and server are on same Windows
host, using a Windows local account instead of domain account, without
any Kerberos setup).

The crash is due to a NULL pointer dereference in function
extract_extra_attribute_setting(), ci->conn_settings.name was
NULL in caller MakePrincHint():

1741 char *extract_extra_attribute_setting(const pgNAME setting, ...
1742 {
1743         const char *str = GET_NAME(setting);
...
1750         for (cptr = str; *cptr; cptr++)     <-- *cptr crashes

Please see attached stack trace for more details.


With attached patch, connection using SSPI authentication was
successful.

Thanks,
  Nikhil

Hi Nikhil,

(2014/06/24 6:02), Nikhil Deshpande wrote:
> Hi,
>
> I ran into a crash in psqlodbc driver on Windows while trying to connect
> using SSPI authentication (both client and server are on same Windows
> host, using a Windows local account instead of domain account, without
> any Kerberos setup).
>
> The crash is due to a NULL pointer dereference in function
> extract_extra_attribute_setting(), ci->conn_settings.name was
> NULL in caller MakePrincHint():
>
> 1741 char *extract_extra_attribute_setting(const pgNAME setting, ...
> 1742 {
> 1743         const char *str = GET_NAME(setting);
> ...
> 1750         for (cptr = str; *cptr; cptr++)     <-- *cptr crashes
>
> Please see attached stack trace for more details.
>
>
> With attached patch, connection using SSPI authentication was
> successful.

Applied.
Thanks.

regards,
Hiroshi Inoue


--
I am using the free version of SPAMfighter.
SPAMfighter has removed 11063 of my spam emails to date.
Get the free SPAMfighter here: http://www.spamfighter.com/len

Do you have a slow PC? Try a Free scan
http://www.spamfighter.com/SLOW-PCfighter?cid=sigen