[krbdev.mit.edu #6832] Bug in MIT Kerberos for Windows Version 3.2.2

Jeffrey Altman via RT rt at krbdev.mit.edu
Thu Dec 9 11:10:00 EST 2010


On 12/9/2010 11:06 AM, David R Boldt via RT wrote:

> We have been able to build a 32-bit wshelper DLL that contains a larger 
> buffer. In testing, this fixes the problem in the production AD and test 
> environments.


Increasing the buffer size does not "fix" the problem.  It avoids
running beyond the buffer.  A fix for the problem would be proper
boundary testing to ensure that the code does not write to or read from
beyond the available buffer size.





More information about the kfwdev mailing list