pull up r19395 from trunk
authorTom Yu <tlyu@mit.edu>
Fri, 6 Apr 2007 20:06:37 +0000 (20:06 +0000)
committerTom Yu <tlyu@mit.edu>
Fri, 6 Apr 2007 20:06:37 +0000 (20:06 +0000)
commit555a2c2034e13cc39ef749206d50780021819842
treecaa22a9c1fd7d46d96b7ce0a7aec26f1ad9a862f
parent9505c155f400396bbb8248e7fa30aca7a05253fe
pull up r19395 from trunk

 r19395@cathode-dark-space:  tlyu | 2007-04-03 15:23:52 -0400
 ticket: new
 subject: MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
 target_version: 1.6.1
 tags: pullup

 Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog.

  * src/lib/krb5/krb/get_in_tkt.c (krb5_klog_syslog): Use vsnprintf
  if available.

 Everything else: use precision fields on "%s" specifiers to truncate
 logged strings, in case someone doesn't have vsnprintf.

ticket: 5513
version_fixed: 1.5.3

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-5@19404 dc483132-0cff-0310-8789-dd5450dbe970
src/kadmin/server/kadm_rpc_svc.c
src/kadmin/server/misc.c
src/kadmin/server/misc.h
src/kadmin/server/ovsec_kadmd.c
src/kadmin/server/schpw.c
src/kadmin/server/server_stubs.c
src/kdc/do_tgs_req.c
src/kdc/kdc_util.c
src/lib/kadm5/logger.c