[krbdev.mit.edu #5507] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Tue Apr 3 15:24:00 EDT 2007


Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog.

	* src/lib/krb5/krb/get_in_tkt.c (krb5_klog_syslog): Use vsnprintf
	if available.

Everything else: use precision fields on "%s" specifiers to truncate
logged strings, in case someone doesn't have vsnprintf.


Commit By: tlyu



Revision: 19395
Changed Files:
_U  trunk/
U   trunk/src/kadmin/server/kadm_rpc_svc.c
U   trunk/src/kadmin/server/misc.c
U   trunk/src/kadmin/server/misc.h
U   trunk/src/kadmin/server/ovsec_kadmd.c
U   trunk/src/kadmin/server/schpw.c
U   trunk/src/kadmin/server/server_stubs.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/kdc_util.c
U   trunk/src/lib/kadm5/logger.c




More information about the krb5-bugs mailing list