[3038] in Kerberos-V5-bugs
pending/688: telnetd handling > 2k sized forwarded tickets
daemon@ATHENA.MIT.EDU (John Brezak)
Wed Feb 3 21:51:06 1999
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: gnats-admin@rt-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, John Brezak <jbrezak@microsoft.com>
Date: Wed, 3 Feb 1999 18:50:50 -0800
From: John Brezak <jbrezak@microsoft.com>
To: "'krb5-bugs@mit.edu'" <krb5-bugs@MIT.EDU>
>Number: 688
>Category: pending
>Synopsis: telnetd handling > 2k sized forwarded tickets
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: gnats-admin
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Wed Feb 03 21:51:00 EST 1999
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
I found that if you forward a ticket larger than 2k you it gets truncated
resulting in a message that the asn.1 decode failed.
*** ..\..\..\..\krb5-1.0.5\src\appl\telnet\telnetd\state.c Sat Feb 07
02:41
:48 1998
--- state.c Thu Feb 04 02:47:12 1999
***************
*** 50,56 ****
* Buffer for sub-options, and macros
* for suboptions buffer manipulations
*/
! unsigned char subbuffer[2048], *subpointer= subbuffer, *subend= subbuffer;
#define SB_CLEAR() subpointer = subbuffer
#define SB_TERM() { subend = subpointer; SB_CLEAR(); }
--- 50,57 ----
* Buffer for sub-options, and macros
* for suboptions buffer manipulations
*/
! unsigned char subbuffer[4096], *subpointer= subbuffer, *subend= subbuffer;
#define SB_CLEAR() subpointer = subbuffer
#define SB_TERM() { subend = subpointer; SB_CLEAR(); }
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
John Brezak * mailto:jbrezak@microsoft.com
Microsoft Corporation * 425-936-2602
One Microsoft Way
Redmond, WA 98052
