pull up r19395 from trunk
authorTom Yu <tlyu@mit.edu>
Wed, 4 Apr 2007 21:08:05 +0000 (21:08 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 4 Apr 2007 21:08:05 +0000 (21:08 +0000)
commit5489f2447ec60c7ab688c30a2213d3bec474d05d
tree78d8da64abc6d63365aa2b7ac78c1c3d3cbeb855
parent3a0f364d6a38449d1ae2c7a9a608a207668e2bbb
pull up r19395 from trunk

 r19395@cathode-dark-space:  tlyu | 2007-04-03 15:23:52 -0400
 ticket: new
 subject: MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
 target_version: 1.6.1
 tags: pullup

 Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog.

  * src/lib/krb5/krb/get_in_tkt.c (krb5_klog_syslog): Use vsnprintf
  if available.

 Everything else: use precision fields on "%s" specifiers to truncate
 logged strings, in case someone doesn't have vsnprintf.

ticket: 5507
version_fixed: 1.6.1

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19397 dc483132-0cff-0310-8789-dd5450dbe970
src/kadmin/server/kadm_rpc_svc.c
src/kadmin/server/misc.c
src/kadmin/server/misc.h
src/kadmin/server/ovsec_kadmd.c
src/kadmin/server/schpw.c
src/kadmin/server/server_stubs.c
src/kdc/do_tgs_req.c
src/kdc/kdc_util.c
src/lib/kadm5/logger.c