Skip Menu |
 

History Show all quoted text — Show full headers
# Fri Apr 06 15:44:03 2007 tlyu (Taylor Yu) - Ticket created
Subject: (krb5-1.5.x) MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
Download (untitled) / with headers
text/plain 76B
fix for krb5-1.5.x: MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
# Fri Apr 06 15:44:05 2007 tlyu (Taylor Yu) - Ticket 5513 RefersTo ticket 5507.
# Fri Apr 06 16:06:42 2007 tlyu (Taylor Yu) - Status changed from 'open' to 'resolved'
# Fri Apr 06 16:06:43 2007 tlyu (Taylor Yu) - Version_Fixed 1.5.3 added
# Fri Apr 06 16:06:43 2007 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 1000B
pull up r19395 from trunk

r19395@cathode-dark-space: tlyu | 2007-04-03 15:23:52 -0400
ticket: new
subject: MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
target_version: 1.6.1
tags: pullup

Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog.

* src/lib/krb5/krb/get_in_tkt.c (krb5_klog_syslog): Use vsnprintf
if available.

Everything else: use precision fields on "%s" specifiers to truncate
logged strings, in case someone doesn't have vsnprintf.




Commit By: tlyu



Revision: 19404
Changed Files:
_U branches/krb5-1-5/
U branches/krb5-1-5/src/kadmin/server/kadm_rpc_svc.c
U branches/krb5-1-5/src/kadmin/server/misc.c
U branches/krb5-1-5/src/kadmin/server/misc.h
U branches/krb5-1-5/src/kadmin/server/ovsec_kadmd.c
U branches/krb5-1-5/src/kadmin/server/schpw.c
U branches/krb5-1-5/src/kadmin/server/server_stubs.c
U branches/krb5-1-5/src/kdc/do_tgs_req.c
U branches/krb5-1-5/src/kdc/kdc_util.c
U branches/krb5-1-5/src/lib/kadm5/logger.c
# Wed Dec 16 18:02:49 2015 tlyu (Taylor Yu) - CustomField pullup deleted