diff options
| author | Ken Raeburn <raeburn@mit.edu> | 1999-12-03 03:31:38 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 1999-12-03 03:31:38 +0000 |
| commit | c804cc030e189029060e46fa156d48aa1ad3606e (patch) | |
| tree | b9f807496830d33b10a498886c875dd9083614b3 | |
| parent | f377218dc421d87956f716a31429ea61e5e32d61 (diff) | |
| download | krb5-c804cc030e189029060e46fa156d48aa1ad3606e.zip krb5-c804cc030e189029060e46fa156d48aa1ad3606e.tar.gz krb5-c804cc030e189029060e46fa156d48aa1ad3606e.tar.bz2 | |
* krb_auth_su.c (krb5_get_tkt_via_passwd): Move check of
principal name length up *before* it gets copied.
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-1@11930 dc483132-0cff-0310-8789-dd5450dbe970
| -rw-r--r-- | src/clients/ksu/ChangeLog | 5 | ||||
| -rw-r--r-- | src/clients/ksu/krb_auth_su.c | 8 |
2 files changed, 10 insertions, 3 deletions
diff --git a/src/clients/ksu/ChangeLog b/src/clients/ksu/ChangeLog index 7099cf4..d61703e 100644 --- a/src/clients/ksu/ChangeLog +++ b/src/clients/ksu/ChangeLog @@ -1,3 +1,8 @@ +1999-12-02 Ken Raeburn <raeburn@mit.edu> + + * krb_auth_su.c (krb5_get_tkt_via_passwd): Move check of + principal name length up *before* it gets copied. + 1999-11-23 Ken Raeburn <raeburn@mit.edu> * krb_auth_su.c (krb5_get_tkt_via_passwd): Check length of diff --git a/src/clients/ksu/krb_auth_su.c b/src/clients/ksu/krb_auth_su.c index 44dd1a1..abc158c 100644 --- a/src/clients/ksu/krb_auth_su.c +++ b/src/clients/ksu/krb_auth_su.c @@ -444,11 +444,13 @@ krb5_boolean krb5_get_tkt_via_passwd (context, ccache, client, server, } else my_creds.times.renew_till = 0; - (void) sprintf(prompt,"Kerberos password for %s: ", client_name); - if (strlen (client_name) + 80 > sizeof (password)) { - fprintf (stderr, "principal name %s too long\n", client_name); + if (strlen (client_name) + 80 > sizeof (prompt)) { + fprintf (stderr, + "principal name %s too long for internal buffer space\n", + client_name); return FALSE; } + (void) sprintf(prompt,"Kerberos password for %s: ", client_name); pwsize = sizeof(password); |