[4088] in Kerberos-V5-bugs
[krbdev.mit.edu #1418] CVS Commit
daemon@ATHENA.MIT.EDU (Ken Raeburn via RT)
Sun Apr 13 07:18:54 2003
Date: Sun, 13 Apr 2003 07:18:46 -0400 (EDT)
Mail-Followup-To: rt@krbdev.mit.edu
Message-Id: <rt-1418-5722.1.2334115448806@krbdev.mit.edu>
In-Reply-To: <rt-1418@krbdev.mit.edu>
From: "Ken Raeburn via RT" <rt-comment@krbdev.mit.edu>
Mail-Copies-To: never
cc: krb5-prs@MIT.EDU
Reply-To: rt-comment@krbdev.mit.edu
Errors-To: krb5-bugs-bounces@mit.edu
Avoid really, really huge cpu time usage caused by iteration count in
spoofed preauth data. (Merely huge cpu time usage is probably still
possible.)
* aes_s2k.c (krb5int_aes_string_to_key): Return an error if the supplied
iteration count is really, really large.
To generate a diff of this commit:
cvs diff -r1.4 -r1.5 krb5/src/lib/crypto/aes/ChangeLog
cvs diff -r1.1 -r1.2 krb5/src/lib/crypto/aes/aes_s2k.c
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
http://mailman.mit.edu/mailman/listinfo/krb5-bugs
