[16289] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #8799] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Wed Apr 24 00:17:02 2019

Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: Greg Hudson via RT <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8799@krbdev.mit.edu>
Message-ID: <rt-8799-49399.12.983945422641@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8799'":;
Date: Wed, 24 Apr 2019 00:16:37 -0400
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu

Check more errors in OpenSSL crypto backend

In krb5int_hmac_keyblock() and krb5int_pbkdf2_hmac(), check for errors
from previously unchecked OpenSSL function calls and return
KRB5_CRYPTO_INTERNAL if they fail.

HMAC_Init() is deprecated in OpenSSL 1.0 and later; as we are
modifying the call to check for errors, call HMAC_Init_ex() instead.

Author: Greg Hudson <ghudson@mit.edu>
Commit: 2298e5c2ff1122bcaff715129f5b746e77c3f42a
Branch: master
 src/lib/crypto/openssl/hmac.c   |   18 +++++++++---------
 src/lib/crypto/openssl/pbkdf2.c |    9 +++++----
 2 files changed, 14 insertions(+), 13 deletions(-)

krb5-bugs mailing list

home help back first fref pref prev next nref lref last post