[497] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

kdb5_edit crashes

jfc@ATHENA.MIT.EDU (jfc@ATHENA.MIT.EDU)
Wed Dec 12 07:50:52 1990

To crash the RT version of kdb5_edit:

	kdb5_edit -e 1
	kdb5_edit:  ank
	ank: Too few arguments
	ank: Usage: ank principal
	kdb5_edit:  ank foo3
	Enter password:
	Re-enter password for verification:
	kdb5_edit:  ldb
	Segmentation violation (core dumped)

The key sequence seems to be "ank" with no arguments followed by a
valid "ank" command.  The malloc pool is corrupted; morecore returns a
bad pointer.  I tried linking with a overwrite-checking malloc, and it
didn't crash.  This leads me to believe that something is writing past
the end of a string it has allocated but not freed (malloc would
complain if it had been freed).

It is crashing in one of the malloc calls from krb5_parse_name.  The
argument to malloc is 8.


home help back first fref pref prev next nref lref last post