671f5582 | 26-Nov-2022 |
Cy Schubert <cy@FreeBSD.org> |
heimdal: Check return code from _hdb_fetch_kvno()
A malformed principal will cause kadmind to segfault. The PR addresses only when chpass is requested but delete is also affected. Fix both.
PR: 26
heimdal: Check return code from _hdb_fetch_kvno()
A malformed principal will cause kadmind to segfault. The PR addresses only when chpass is requested but delete is also affected. Fix both.
PR: 268002 Reported by: Robert Morris <rtm@lcs.mit.edu> MFC after: 3 days
show more ...
|
780f663d | 26-Nov-2022 |
Cy Schubert <cy@FreeBSD.org> |
heimdal: Add missing kadm5 error checks
Generally obtained from upstream 655c057769f56bd8cdb7d16e93f1e7a7cb260342.
PR: 267944, 267972 Obtained from: Heimdal commit 655c057769f56bd8cdb7d16e93f1e7a7
heimdal: Add missing kadm5 error checks
Generally obtained from upstream 655c057769f56bd8cdb7d16e93f1e7a7cb260342.
PR: 267944, 267972 Obtained from: Heimdal commit 655c057769f56bd8cdb7d16e93f1e7a7cb260342 MFC after: 3 days
show more ...
|
e13150e2 | 26-Nov-2022 |
Cy Schubert <cy@FreeBSD.org> |
heimdal: Fix uninitialized pointer dereference
krb5_ret_preincipal() returns a non-zero return code when a garbage principal is passed to it. Unfortunately ret_principal_ent() does not check the ret
heimdal: Fix uninitialized pointer dereference
krb5_ret_preincipal() returns a non-zero return code when a garbage principal is passed to it. Unfortunately ret_principal_ent() does not check the return code, with garbage pointing to what would have been the principal. This results in a segfault when free() is called.
PR: 267944, 267972 Reported by: Robert Morris <rtm@lcs.mit.edu> MFC after: 3 days
show more ...
|
91db8482 | 24-Nov-2022 |
Cy Schubert <cy@FreeBSD.org> |
heimdal: Handle other types of garbage data
In addition to garbage realm data, also handle garbage dbname, acl_file, stash_file, and invalid bitmask garbage data.
PR: 267912 Reported by: Robert Mo
heimdal: Handle other types of garbage data
In addition to garbage realm data, also handle garbage dbname, acl_file, stash_file, and invalid bitmask garbage data.
PR: 267912 Reported by: Robert Morris <rtm@lcs.mit.edu> MFC after: 3 days
show more ...
|