[11676] in Kerberos-V5-bugs
[krbdev.mit.edu #6770] kg_unseal leads to overlap of source and
daemon@ATHENA.MIT.EDU (Ezra Peisach via RT)
Fri Sep 3 00:27:18 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Ezra Peisach via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6770@krbdev.mit.edu>
Message-ID: <rt-6770-33117.17.9023616860102@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6770'":;"'AdminCc of krbdev.mit.edu Ticket #6770'":;@MIT.EDU
Date: Fri, 3 Sep 2010 00:27:16 -0400 (EDT)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
This happens in kadmin...
According to the memcpy man page memmove should be used if the memory
overlaps.
The k5_unseal calls kg_encrypt with the same source and destination....
==3917== Command:
/home/epeisach/krb5/trunk/build/tests/dejagnu/../../kadmin/cli
/kadmin -p krbtest/admin@KRBTEST.COM -q ank\ -randkey\
sample/chem-dhcp-143.bu.e
du@KRBTEST.COM
==3917== Parent PID: 27515
==3917==
==3917== Source and destination overlap in memcpy(0x41ca160, 0x41ca160, 16)
==3917== at 0x4007535: memcpy (mc_replace_strmem.c:497)
==3917== by 0x412BF9B: krb5_k_encrypt (encrypt.c:65)
==3917== by 0x405AAC8: kg_encrypt (util_crypt.c:239)
==3917== by 0x4053A1C: kg_unseal (k5unseal.c:301)
==3917== by 0x405B398: krb5_gss_verify_mic (verify.c:43)
==3917== by 0x4045B44: gss_verify_mic (g_verify.c:72)
==3917== by 0x402098F: authgss_refresh (auth_gss.c:492)
==3917== by 0x4020BC5: gssrpc_authgss_create (auth_gss.c:210)
==3917== by 0x40171C8: init_any (client_init.c:756)
==3917== by 0x804D751: kadmin_startup (kadmin.c:515)
==3917== by 0x804DB63: main (ss_wrapper.c:48)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
