[krbdev.mit.edu #6832] Bug in MIT Kerberos for Windows Version 3.2.2

[David R Boldt via RT]

> On 12/3/2010 9:27 AM, David R Boldt via RT wrote:
> > 
> > This morning KFW 3.2.2 began crashing immediately after the packets 
> > containing DNS resolution
> > results are returned to kinit.  We have an Active Directory 
infrastructure 
> > with 103 KDCs; Is there a limit
> > in the libraries that we may be encroaching on?
> 
> I suspect that the limit that is being reached is the maximum response
> size in the wshelp32.dll resolver interface.
> 
> A crash dump would be helpful in identifying the actual cause.

Function     Arg 1     Arg 2     Arg 3   Source 
wshelp32!do_res_search+290     0146da74     00000001     00000021 
wshelp32!res_search+209     0146dcb4     00000001     00000021 
krb5_32!res_search+30     0146dcb4     00000001     00000021 
krb5_32!krb5int_dns_init+f4     0146dc90     0146dcb4     00000001 
krb5_32!krb5int_make_srv_query_realm+119     00f0c6f4     1c0884a0 
1c088d80 
krb5_32!krb5_locate_srv_dns_1+27     00f0c6f4     1c0884a0     1c088d80 
krb5_32!dns_locate_server+eb     00f92908     00f0c6f4     0146df1c 
krb5_32!krb5int_locate_server+90     00f92908     00f0c6f4     0146e018 
krb5_32!krb5_locate_kdc+28     00f92908     00f0c6f4     0146e018 
krb5_32!krb5_sendto_kdc+132     00f92908     00effa28     00f0c6f4 
krb5_32!send_as_request+8b     00f92908     0146e1b0     0146e160 
krb5_32!krb5_get_init_creds+692     00f92908     0146f0a8     00f0c6f0 
krb5_32!krb5_get_init_creds_password+10a     00f92908     0146f0a8 
00f0c6f0 
krb5cred!khm_krb5_kinit+3b9     00000000     00eff600     00000000 
krb5cred!k5_kinit_fiber_proc+12f     00000000     00000000     00000000 
kernel32!GetModuleFileNameA+1b4     01227004     00000000     00000000 
kernel32!ConvertThreadToFiber+93     00000000     00000000     00000000 
 

                                         -- David Boldt
                                             <dboldt at usgs.gov>