Skip Menu |
 

History Show all quoted text — Show full headers
# Tue Mar 18 14:55:33 2008 raeburn (Ken Raeburn) - Ticket created
From: raeburn@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 360B

Fix MITKRB5-SA-2008-002: array overrun in libgssrpc.

Don't update the internally-tracked maximum file descriptor value if
the new one is FD_SETSIZE (or NOFILE) or above. Reject TCP file
descriptors of FD_SETSIZE (NOFILE) or above.


Commit By: raeburn



Revision: 20278
Changed Files:
_U trunk/
U trunk/src/lib/rpc/svc.c
U trunk/src/lib/rpc/svc_tcp.c
# Tue Mar 18 14:55:36 2008 raeburn (Ken Raeburn) - Requestor raeburn (Ken Raeburn) added
# Tue Mar 18 14:55:37 2008 raeburn (Ken Raeburn) - Status changed from 'new' to 'resolved'
# Tue Mar 18 14:55:37 2008 raeburn (Ken Raeburn) - Tags pullup added
# Tue Mar 18 14:55:38 2008 raeburn (Ken Raeburn) - Target_Version 1.6.4 added
# Wed Mar 19 14:38:43 2008 tlyu (Taylor Yu) - Version_Fixed 1.6.4 added
# Wed Mar 19 14:38:43 2008 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 576B

pull up r20278 from trunk

r20278@cathode-dark-space: raeburn | 2008-03-18 14:55:26 -0400
ticket: new
subject: MITKRB5-SA-2008-002
target_version: 1.6.4
tags: pullup

Fix MITKRB5-SA-2008-002: array overrun in libgssrpc.

Don't update the internally-tracked maximum file descriptor value if
the new one is FD_SETSIZE (or NOFILE) or above. Reject TCP file
descriptors of FD_SETSIZE (NOFILE) or above.




Commit By: tlyu



Revision: 20282
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/rpc/svc.c
U branches/krb5-1-6/src/lib/rpc/svc_tcp.c
# Thu Mar 20 19:43:32 2008 tlyu (Taylor Yu) - Subject changed from 'MITKRB5-SA-2008-002' to 'MITKRB5-SA-2008-002 rpc/svc.c descriptor array overrun [CVE-2008-0947]'
# Thu Mar 20 19:43:33 2008 tlyu (Taylor Yu) - Component krb5-libs added
# Wed Dec 16 18:02:52 2015 tlyu (Taylor Yu) - CustomField pullup deleted