kpropd denial of service [MITKRB5-SA-2011-001 CVE-2010-4022]
authorTom Yu <tlyu@mit.edu>
Wed, 9 Feb 2011 21:38:04 +0000 (21:38 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 9 Feb 2011 21:38:04 +0000 (21:38 +0000)
pull up r24621 from trunk

 ------------------------------------------------------------------------
 r24621 | tlyu | 2011-02-09 15:25:03 -0500 (Wed, 09 Feb 2011) | 8 lines

 ticket: 6859
 subject: kpropd denial of service [MITKRB5-SA-2011-001 CVE-2010-4022]
 tags: pullup
 target_version: 1.9.1

 When operating in standalone mode and not doing iprop, don't return
 from do_standalone() if the child exits with abnormal status.

ticket: 6864
version_fixed: 1.7.2
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@24627 dc483132-0cff-0310-8789-dd5450dbe970

src/slave/kpropd.c

index ba63d5847d0bcd0ff8dfd5517827113cc95e301a..6826b28f6aa1fec438bdb401fdc17bd04c2541be 100644 (file)
@@ -422,11 +422,11 @@ retry:
                    }
 
                    close(s);
-                   if (iproprole == IPROP_SLAVE)
+                   if (iproprole == IPROP_SLAVE) {
                        close(finet);
-                   if ((ret = WEXITSTATUS(status)) != 0)
-                       return (ret);
+                       if ((ret = WEXITSTATUS(status)) != 0)
+                         return (ret);
+                   }
                }
                if (iproprole == IPROP_SLAVE)
                    break;