diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-01-01 00:23:43 -0500 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2013-01-01 17:41:49 -0500 |
| commit | 9b702abe222d4b279d5869f96f09074452478b1e (patch) | |
| tree | 0d88e593e5fead5e74f09b12629ca64242749c11 /src/configure.in | |
| parent | 379d39c17b8930718e98185a5b32a0f7f3e3b4b6 (diff) | |
| download | krb5-9b702abe222d4b279d5869f96f09074452478b1e.tar.gz krb5-9b702abe222d4b279d5869f96f09074452478b1e.tar.xz krb5-9b702abe222d4b279d5869f96f09074452478b1e.zip | |
Fix gss_str_to_oid and gss_oid_to_str edge cases
Neither function correctly handled OIDs whose second arc exceeds 47
(theoretically possible if the first arc is 2). gss_str_to_oid had
additional problems: it used scanf, it didn't consistently protect
against read overrun if the input buffer wasn't null-terminated, and
it could get confused by + or - characters in the first two arcs. Fix
gss_oid_to_str and rewrite gss_str_to_oid.
Also add a test program.
ticket: 7524 (new)
Diffstat (limited to 'src/configure.in')
0 files changed, 0 insertions, 0 deletions