Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: tlyu@mit.edu Subject: SVN Commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 665 Ensure null termination of AFS salts Use krb5int_copy_data_contents_add0 when copying a pa-pw-salt or pa-afs3-salt value in pa_salt(). If it's an afs3-salt, we're going to throw away the length and use strcspn in krb5int_des_string_to_key, which isn't safe if the value is unterminated. (cherry picked from commit f566fee75f2455d6e5e7ee4fcdf5a0d327808639) https://github.com/krb5/krb5/commit/a79e78cdcfa70d48a9357bbe16a3323b899c8219 Author: Greg Hudson Committer: Tom Yu Commit: a79e78cdcfa70d48a9357bbe16a3323b899c8219 Branch: krb5-1.10 src/lib/krb5/krb/preauth2.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)