IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
b04f617803
freeipa/daemons/ipa-slapi-plugins
History
Thierry Bordaz b04f617803 Heap corruption in ipapwd plugin 
ipapwd_encrypt_encode_key allocates 'kset' on the heap but
with num_keys and keys not being initialized.
Then ipa_krb5_generate_key_data initializes them with the
generated keys.
If ipa_krb5_generate_key_data fails (here EINVAL meaning no
principal->realm.data), num_keys and keys are left uninitialized.
Upon failure, ipapwd_keyset_free is called to free 'kset'
that contains random num_keys and keys.

allocates kset with calloc so that kset->num_keys==0 and
kset->keys==NULL

https://fedorahosted.org/freeipa/ticket/6030

Reviewed-By: Simo Sorce <ssorce@redhat.com>
Reviewed-By: Lukas Slebodnik <lslebodn@redhat.com>
2016-07-19 13:17:37 +02:00
..
common Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-cldap Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-dns Fix minor typos 2015-07-17 14:33:30 +02:00
ipa-enrollment ipa-enrollment: set krbCanonicalName attribute on enrolled host entry 2016-06-23 09:48:06 +02:00
ipa-extdom-extop adtrust: support UPNs for trusted domain users 2016-06-11 17:25:50 +02:00
ipa-lockout do not log BINDs to non-existent users as errors 2015-04-02 08:59:25 +00:00
ipa-modrdn Remove CFLAGS duplication. 2013-12-06 14:44:41 +01:00
ipa-otp-counter Fix various bugs in ipa-opt-counter and ipa-otp-lasttoken 2014-11-05 15:28:27 +01:00
ipa-otp-lasttoken OTP: failed search for the user of last token emits an error message 2015-01-30 11:02:16 +01:00
ipa-pwd-extop Heap corruption in ipapwd plugin 2016-07-19 13:17:37 +02:00
ipa-range-check ipa-range-check: do not treat missing objects as error 2015-02-24 22:47:36 +01:00
ipa-sidgen Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-uuid User Life Cycle: Exclude subtree for ipaUniqueID generation 2015-04-08 08:19:09 +02:00
ipa-version Remove CFLAGS duplication. 2013-12-06 14:44:41 +01:00
ipa-winsync Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
libotp Fix an integer underflow bug in libotp 2015-09-29 15:16:09 +02:00
topology Topology plugins sigsev/heap corruption when adding a managed host 2016-06-22 17:51:53 +02:00
Makefile.am ds plugin - manage replication topology in the shared tree 2015-05-26 10:40:29 +02:00
README Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00

README