oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Initialize zero before using it in unwrap_des().

Browse Source 
Heimdal since fc702a97f5 (August 2009)
can't process DES wrap tokens unless the stack garbage in the zero
array happens to be all zeros.

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
This commit is contained in:
ghudson@MIT.EDU
2011-06-13 21:11:31 -04:00
committed by Love Hörnquist Åstrand
parent 9c040227a5
commit 3c725a465e
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lib/gssapi/krb5/unwrap.c
View File

@@ -98,6 +98,7 @@ unwrap_des
if(cstate) { if(cstate) {
/* decrypt data */ /* decrypt data */
memcpy (&deskey, key->keyvalue.data, sizeof(deskey)); memcpy (&deskey, key->keyvalue.data, sizeof(deskey));
memset (&zero, 0, sizeof(zero));
for (i = 0; i < sizeof(deskey); ++i) for (i = 0; i < sizeof(deskey); ++i)
deskey[i] ^= 0xf0; deskey[i] ^= 0xf0;