[17143] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #9250] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Fri Oct 30 13:02:44 2026

From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To: 
Message-ID: <rt-4.4.3-2-1757063-1793343091-1118.9250-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9250":;
Date: Fri, 30 Oct 2026 02:51:31 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


Fri Oct 30 02:51:31 2026: Request 9250 was acted upon.
 Transaction: Ticket created by ghudson@mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson@mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9250 >



Fix two KDB data validation issues

In the LMDB KDB module, fix a bug in klmdb_decode_princ() that
renders the key_data_ver validity check inoperable.

In the DB2 KDB module, bounds-check entry->e_length against the
remaining record data, and decrease sizeleft when we increase nextloc.

[ghudson@mit.edu: combined two commits and rewrote commit message]

https://github.com/krb5/krb5/commit/48adb434dfd4807fc84187e46bf09ef4ee42377c
Author: Bogdan Boguslavskij <bogdanb@altlinux.org>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 48adb434dfd4807fc84187e46bf09ef4ee42377c
Branch: master
 src/plugins/kdb/db2/kdb_xdr.c  | 5 +++++
 src/plugins/kdb/lmdb/marshal.c | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post