[11291] in Kerberos-V5-bugs
[krbdev.mit.edu #6625] SVN Commit
daemon@ATHENA.MIT.EDU (Ezra Peisach via RT)
Thu Jan 7 21:12:30 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Ezra Peisach via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6625@krbdev.mit.edu>
Message-ID: <rt-6625-32088.9.43522084581012@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6625'":;"'AdminCc of krbdev.mit.edu Ticket #6625'":;@MIT.EDU
Date: Thu, 7 Jan 2010 21:12:25 -0500 (EST)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
The yarrow code uses a keyblock that is partially initialized. This results
in krb5_k_free_key trying to look up the enctype to call the free handler.
One of the valgrind reports: (there are several paths)
==26701== Conditional jump or move depends on uninitialised value(s)
==26701== at 0x40E9AF0: find_enctype (etypes.h:81)
==26701== by 0x40E9C9E: krb5_k_free_key (key.c:91)
==26701== by 0x40D641A: krb5int_yarrow_cipher_init (ycipher.c:49)
==26701== by 0x40D593A: yarrow_gate_locked (yarrow.c:578)
==26701== by 0x40D5349: krb5int_yarrow_output_Block (yarrow.c:423)
==26701== by 0x40D581B: yarrow_output_locked (yarrow.c:553)
==26701== by 0x40D5667: krb5int_yarrow_output (yarrow.c:513)
==26701== by 0x40EBD2D: krb5_c_random_make_octets (prng.c:112)
==26701== by 0x40D4119: krb5int_old_encrypt (old_aead.c:97)
==26701== by 0x40E9696: krb5_k_encrypt_iov (encrypt_iov.c:42)
==26701== by 0x8049554: main (t_encrypt.c:206)
==26701==
http://src.mit.edu/fisheye/changelog/krb5/?cs=23609
Commit By: epeisach
Revision: 23609
Changed Files:
U trunk/src/lib/crypto/krb/yarrow/ycipher.c
U trunk/src/lib/crypto/krb/yarrow/ycipher.h
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
