From 01b93a5522fd0e402401bf6ed3c1ebfde613965e Mon Sep 17 00:00:00 2001 From: Robbie Harwood Date: Tue, 9 Jun 2020 16:23:37 -0400 Subject: [PATCH] Improve negoex_parse_token() code hygiene If the while loop in negoex_parse_token() runs for zero iterations, major will be used initialized. Currently this cannot happen, but only because both of the call sites check for zero-length tokens. Initialize major for safety. [ghudson@mit.edu: rewrote commit message] (cherry picked from commit 4f91b6f8fa6fe1de662b3fdac0d59b7758ec642a) (cherry picked from commit c726a72c68244129eb08b840b92144acfa776573) --- src/lib/gssapi/spnego/negoex_util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/gssapi/spnego/negoex_util.c b/src/lib/gssapi/spnego/negoex_util.c index 700368456..99580fd79 100644 --- a/src/lib/gssapi/spnego/negoex_util.c +++ b/src/lib/gssapi/spnego/negoex_util.c @@ -454,7 +454,7 @@ negoex_parse_token(OM_uint32 *minor, spnego_gss_ctx_id_t ctx, gss_const_buffer_t token, struct negoex_message **messages_out, size_t *count_out) { - OM_uint32 major; + OM_uint32 major = GSS_S_COMPLETE; size_t count = 0; struct k5input in; struct negoex_message *messages = NULL, *newptr;