git://git.openafs.org / openafs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: be01427) | patch
OPENAFS-SA-2018-002 kaserver: prevent KAM_ListEntry information leak
authorMark Vitale <mvitale@sinenomine.net>
Tue, 26 Jun 2018 09:26:21 +0000 (05:26 -0400)
committerBenjamin Kaduk <kaduk@mit.edu>
Sun, 9 Sep 2018 22:34:03 +0000 (17:34 -0500)
commitb604ee7add7be416bf20973422a041e913d20761
treeb7f6381c9021416739681cde46eaabc5ff64a482tree | snapshot
parentbe0142707ca54f3de99c4886530e7ac9f48dd61ccommit | diff
OPENAFS-SA-2018-002 kaserver: prevent KAM_ListEntry information leak

KAM_ListEntry (kas list) does not initialize its output correctly.  It
leaks kaserver memory contents over the wire:

struct kaindex
- up to 64 bytes for member name
- up to 64 bytes for member instance

Initialize the buffer.

[kaduk@mit.edu: move initialization to top of server routine]

Change-Id: I5cc430fc996e7e89d38a384d092b9d4fad248fa4
src/kauth/kaprocs.c diff | blob | history
OpenAFS Master Repository