projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ce3ba8b) | patch
Ensure null termination of AFS salts
authorGreg Hudson <ghudson@mit.edu>
Fri, 27 Apr 2012 17:04:24 +0000 (17:04 +0000)
committerGreg Hudson <ghudson@mit.edu>
Fri, 27 Apr 2012 17:04:24 +0000 (17:04 +0000)
commitf566fee75f2455d6e5e7ee4fcdf5a0d327808639
tree4c2cc4abc2d3dd8b0eeb3c663d5c8cf9ecc33842tree | snapshot
parentce3ba8ba7670b57ffb2b1e2707f0cb443e900b0fcommit | diff
Ensure null termination of AFS salts

Use krb5int_copy_data_contents_add0 when copying a pa-pw-salt or
pa-afs3-salt value in pa_salt().  If it's an afs3-salt, we're going to
throw away the length and use strcspn in krb5int_des_string_to_key,
which isn't safe if the value is unterminated.

ticket: 2545

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25833 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/preauth2.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.