RT RT/krbdev.mit.edu: Ticket #7537 Ensure null termination of AFS salts Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
7537
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
Tags
Version_reported
Version_Fixed
  • 1.10.4
Target_Version
 

 Relationships  
Depends on:
Depended on by:
Parents:
Children:

Refers to:
  • 2545: (ghudson) AFS string_to_key broken for passwords > 8 chars [resolved]
Referred to by:
 
 Dates  
Created: Fri Jan 11 14:50:29 2013
Starts: Not set
Started: Fri Jan 11 14:50:30 2013
Last Contact: Not set
Due: Not set
Updated: Fri Jan 11 14:55:17 2013 by tlyu
 

 People  
Owner
 tlyu
Requestors
 tlyu@mit.edu
Cc
 
AdminCc
 
 

 More about Taylor Yu  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Fri Jan 11 14:50:30 2013  tlyu - Ticket created    
     
From: tlyu@mit.edu
Subject: SVN Commit


Ensure null termination of AFS salts

Use krb5int_copy_data_contents_add0 when copying a pa-pw-salt or
pa-afs3-salt value in pa_salt().  If it's an afs3-salt, we're going to
throw away the length and use strcspn in krb5int_des_string_to_key,
which isn't safe if the value is unterminated.

(cherry picked from commit f566fee75f2455d6e5e7ee4fcdf5a0d327808639)

https://github.com/krb5/krb5/commit/a79e78cdcfa70d48a9357bbe16a3323b899c8219
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: a79e78cdcfa70d48a9357bbe16a3323b899c8219
Branch: krb5-1.10
 src/lib/krb5/krb/preauth2.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Download (untitled) 665b
      Fri Jan 11 14:50:30 2013  tlyu - Requestor tlyu@mit.edu added    
      Fri Jan 11 14:50:30 2013  tlyu - Status changed from new to resolved    
      Fri Jan 11 14:50:30 2013  tlyu - Version_Fixed 1.10.4 added    
      Fri Jan 11 14:54:43 2013  tlyu - Ticket 7537 RefersTo ticket 5126.    
      Fri Jan 11 14:55:17 2013  tlyu - Ticket 7537 no longer RefersTo ticket fsck.com-rt://mit.edu/krbdev.mit.edu/ticket/5126.    
      Fri Jan 11 14:55:17 2013  tlyu - Ticket 7537 RefersTo ticket 2545.