Project

General

Profile

Actions
Copy link

Bug #13935

closed

ksetpw passes integers to %s format specifier

Added by C Fraire 5 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Assignee:
C Fraire
Category:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Bite-size
Tags:
Gerrit CR:
1597

Description

Core dump from a run led to two statements in kt_add_entry() where `enctype` is passed to %s but where the (otherwise unused) krb5_enctype_to_string() value should be used instead.

Current behavior:

/usr/lib/krb5/ksetpw: No such file or directory Could not retrieve entry in keytab
Memory fault(coredump)

Related issues

Related to illumos gate - Bug #13936: ksetpw typo to strtok_r() prevents space delimited -e enctype_listClosedC Fraire

Actions
Related to illumos gate - Bug #13942: ksetpw salt may be used uninitializedClosedC Fraire

Actions
Actions
Copy link
 #1

Updated by C Fraire 5 months ago

With the fix:

/tmp/ksetpw: No such file or directory Could not retrieve entry in keytab
/tmp/ksetpw: Not enough space Could not compute salt for AES-256 CTS mode with 96-bit SHA-1 HMAC

Actions
Copy link
 #2

Updated by Electric Monk 5 months ago

  • Gerrit CR set to 1597
Actions
Copy link
 #3

Updated by Dan McDonald 4 months ago

  • Related to Bug #13936: ksetpw typo to strtok_r() prevents space delimited -e enctype_list added
Actions
Copy link
 #4

Updated by Dan McDonald 4 months ago

  • Related to Bug #13942: ksetpw salt may be used uninitialized added
Actions
Copy link
 #5

Updated by Electric Monk 4 months ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

git commit 298aa1575e761a7d02bc7c65fa603ffd0266fcb7

commit  298aa1575e761a7d02bc7c65fa603ffd0266fcb7
Author: Chris Fraire <cfraire@me.com>
Date:   2021-08-10T17:08:28.000Z

    13935 ksetpw passes integers to %s format specifier
    13936 ksetpw typo to strtok_r() prevents space delimited -e enctype_list
    13942 ksetpw salt may be used uninitialized
    Reviewed by: Toomas Soome <tsoome@me.com>
    Approved by: Dan McDonald <danmcd@joyent.com>

Actions
Copy link

Also available in: Atom PDF