Project

General

Profile

Actions

Bug #13935

closed

ksetpw passes integers to %s format specifier

Added by C Fraire almost 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Bite-size
Tags:
Gerrit CR:
External Bug:

Description

Core dump from a run led to two statements in kt_add_entry() where `enctype` is passed to %s but where the (otherwise unused) krb5_enctype_to_string() value should be used instead.

Current behavior:

/usr/lib/krb5/ksetpw: No such file or directory Could not retrieve entry in keytab
Memory fault(coredump)


Related issues

Related to illumos gate - Bug #13936: ksetpw typo to strtok_r() prevents space delimited -e enctype_listClosedC Fraire

Actions
Related to illumos gate - Bug #13942: ksetpw salt may be used uninitializedClosedC Fraire

Actions
Actions #1

Updated by C Fraire almost 2 years ago

With the fix:

/tmp/ksetpw: No such file or directory Could not retrieve entry in keytab
/tmp/ksetpw: Not enough space Could not compute salt for AES-256 CTS mode with 96-bit SHA-1 HMAC

Actions #2

Updated by Electric Monk almost 2 years ago

  • Gerrit CR set to 1597
Actions #3

Updated by Dan McDonald almost 2 years ago

  • Related to Bug #13936: ksetpw typo to strtok_r() prevents space delimited -e enctype_list added
Actions #4

Updated by Dan McDonald almost 2 years ago

  • Related to Bug #13942: ksetpw salt may be used uninitialized added
Actions #5

Updated by Electric Monk almost 2 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

git commit 298aa1575e761a7d02bc7c65fa603ffd0266fcb7

commit  298aa1575e761a7d02bc7c65fa603ffd0266fcb7
Author: Chris Fraire <cfraire@me.com>
Date:   2021-08-10T17:08:28.000Z

    13935 ksetpw passes integers to %s format specifier
    13936 ksetpw typo to strtok_r() prevents space delimited -e enctype_list
    13942 ksetpw salt may be used uninitialized
    Reviewed by: Toomas Soome <tsoome@me.com>
    Approved by: Dan McDonald <danmcd@joyent.com>

Actions

Also available in: Atom PDF