[krbdev.mit.edu #6652] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Jan 28 20:22:18 EST 2010


krb5_def_fetch_mkey_list was incorrectly filtering mkey_aux entries
when searching the list for an entry which can be decrypted with the
stashed master key.  This bug was masked in most cases by the mkvno
heuristic.

Remove the mkvno heuristic, since performance is not an issue for this
rarely-performed operation, and remove the incorrect enctype
comparison in the brute-force search.


http://src.mit.edu/fisheye/changelog/krb5/?cs=23677
Commit By: ghudson
Revision: 23677
Changed Files:
U   trunk/src/lib/kdb/kdb_default.c




More information about the krb5-bugs mailing list