Skip Menu |
 

Subject: krb4's vts_long() and vts_short() corrupt memory
krb4's vts_long() and vts_short() modify the passed in pointer so that
the caller can no longer free it -- they return a pointer to the middle
of the buffer. Also, they both write to the beginning of the buffer
passed in, not appending data to the end like they should be doing.
From: lxs@mit.edu
Subject: CVS Commit
pullup from trunk


To generate a diff of this commit:



cvs diff -r1.174.2.2 -r1.174.2.3 krb5/src/lib/krb4/ChangeLog
From: lxs@mit.edu
Subject: CVS Commit
pullup from trunk


To generate a diff of this commit:



cvs diff -r1.1 -r1.1.2.1 krb5/src/lib/krb4/kadm_stream.c
Subject: krb4's vts_long() and vts_short() corrupt memory
krb4's vts_long() and vts_short() modify the passed in pointer so that
the caller can no longer free it -- they return a pointer to the middle
of the buffer. Also, they both write to the beginning of the buffer
passed in, not appending data to the end like they should be doing.
Accidentally created two copies of this bug. Merged them to avoid
confusion.