[27827] in CVS-changelog-for-Kerberos-V5
krb5 commit: Add test case for CVE-2013-1417
daemon@ATHENA.MIT.EDU (Tom Yu)
Mon Jul 1 14:53:49 2013
Date: Mon, 1 Jul 2013 14:53:40 -0400
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201307011853.r61Ireaw026575@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/f3328214a01fe9ca4de72cb9593ee10c39c638e9
commit f3328214a01fe9ca4de72cb9593ee10c39c638e9
Author: Tom Yu <tlyu@mit.edu>
Date: Fri Jun 28 15:34:17 2013 -0400
Add test case for CVE-2013-1417
ticket: 7670 (new)
tags: pullup
target_version: 1.11.4
src/tests/Makefile.in | 1 +
src/tests/t_cve-2013-1417.py | 13 +++++++++++++
2 files changed, 14 insertions(+), 0 deletions(-)
diff --git a/src/tests/Makefile.in b/src/tests/Makefile.in
index c5536c3..a7f8c2d 100644
--- a/src/tests/Makefile.in
+++ b/src/tests/Makefile.in
@@ -106,6 +106,7 @@ check-pytests:: gcred hist kdbtest plugorder t_init_creds t_localauth
$(RUNPYTEST) $(srcdir)/t_cve-2012-1014.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_cve-2012-1015.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_cve-2013-1416.py $(PYTESTFLAGS)
+ $(RUNPYTEST) $(srcdir)/t_cve-2013-1417.py $(PYTESTFLAGS)
clean::
$(RM) gcred hist kdbtest plugorder t_init_creds t_localauth
diff --git a/src/tests/t_cve-2013-1417.py b/src/tests/t_cve-2013-1417.py
new file mode 100644
index 0000000..c26930a
--- /dev/null
+++ b/src/tests/t_cve-2013-1417.py
@@ -0,0 +1,13 @@
+#!/usr/bin/python
+
+from k5test import *
+
+realm = K5Realm(realm='TEST')
+
+# CVE-2013-1417 KDC dereferences null pointer
+
+realm.kinit(realm.user_princ, password('user'))
+realm.run([kvno, '-S', 'host', 'example.com'], expected_code=1)
+# Make sure KDC is still running.
+realm.kinit(realm.user_princ, password('user'))
+success('CVE-2013-1417 regression test')
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
