[19038] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Heap Corruption with large authorization header values

daemon@ATHENA.MIT.EDU (Tim Vega)
Tue Oct 7 19:13:06 2014

From: Tim Vega <tvega@tableausoftware.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Wed, 1 Oct 2014 20:19:30 +0000
Message-ID: <F97DCF8911E6C842975C622C0C8E680F276722F1@S1P5DAG8C.EXCHPROD.USA.NET>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="_004_F97DCF8911E6C842975C622C0C8E680F276722F1S1P5DAG8CEXCHPR_"
Errors-To: krbdev-bounces@mit.edu

--_004_F97DCF8911E6C842975C622C0C8E680F276722F1S1P5DAG8CEXCHPR_
Content-Type: text/plain; charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable

Hello,

We have mod_auth_kerb 5.4 running with krb5-1.12.2

When sending a request with a very large authorization value, 12462 charact=
ers and sample attached, the kerberos library encounters a heap corruption =
somewhere in a call to gss_accept_sec_context.
The data that appears to be corrupted is pointed to by the variable mechtok=
_out in spnego_gss_accept_sec_context in lib/gssapi/spnego/spnego_mech.c. T=
he corruption gets detected by a call to gss_release_buffer in the cleanup =
routine of the same function.

Has anyone seen this before? Is this expected behavior given a large auth h=
eader?

Tim



--_004_F97DCF8911E6C842975C622C0C8E680F276722F1S1P5DAG8CEXCHPR_
Content-Type: text/plain; name=largeheader.txt
Content-Description: largeheader.txt
Content-Disposition: attachment; filename="largeheader.txt"; size=13002;
	creation-date="Wed, 24 Sep 2014 18:15:51 GMT";
	modification-date="Wed, 24 Sep 2014 18:15:51 GMT"
Content-Transfer-Encoding: base64
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--_004_F97DCF8911E6C842975C622C0C8E680F276722F1S1P5DAG8CEXCHPR_
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

--_004_F97DCF8911E6C842975C622C0C8E680F276722F1S1P5DAG8CEXCHPR_--


home help back first fref pref prev next nref lref last post