[krbdev.mit.edu #2266] wrap_size_limit broken for CFX

Wyllys Ingersoll via RT rt-comment at krbdev.mit.edu
Mon Feb 23 16:27:18 EST 2004


On Mon, 2004-02-23 at 16:22, Ken Raeburn wrote:
> Well, I'm still not seeing the off-by-one issue, for some reason, but
> this version of the code seems to get the right answer (including your
> example of 1076 -> 1016), so I'll be checking it in.  Thanks for
> catching this.
> 
> Ken
> 
>     while (sz > 0 && krb5_encrypt_size(sz, ctx->enc->enctype) + 16 > req_output_size)

One more thing - wouldn't it be better to use the newer
krb5_c_encrypt_length() routine here and get rid of one more 
use of the old 'krb5_encrypt_size' API?

-Wyllys




More information about the krb5-bugs mailing list