Page MenuHomeFreeBSD
Differential D56273

kgssapi_krb5: Fix a couple of bugs in krb5_import()
AcceptedPublic
Actions

Authored by markj on Apr 6 2026, 2:49 PM.
Tags
None
Referenced Files
F175294927: D56273.id174967.diff
Fri, Oct 9, 6:08 PM
F175282618: D56273.id.diff
Fri, Oct 9, 4:24 PM
Unknown Object (File)
Tue, Oct 6, 1:11 PM
Unknown Object (File)
Tue, Oct 6, 6:04 AM
Unknown Object (File)
Tue, Sep 29, 1:42 PM
Unknown Object (File)
Thu, Sep 10, 1:57 PM
Unknown Object (File)
Sep 6 2026, 6:27 PM
Unknown Object (File)
Sep 6 2026, 1:43 PM
View All 65 Files
Subscribers
imp

Details

Reviewers
rmacklem
Summary

We don't bound the size of the allocation for the jitter window, so it's
possible to request up to 16GB of memory, and on 32-bit systems, the
multiplication can overflow. Bound the allocation to the size of the
context.

Ensure that km_elem is freed if we hit the error case.

Reported by: AEGIS and Equilateral AI

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 71990
Build 68873: arc lint + arc unit

Event Timeline

markj created this revision.Apr 6 2026, 2:49 PM
Herald added a subscriber: imp. · View Herald TranscriptApr 6 2026, 2:49 PM
markj requested review of this revision.Apr 6 2026, 2:49 PM
Harbormaster completed remote builds in B71990: Diff 174967.Apr 6 2026, 2:49 PM
rmacklem accepted this revision.Apr 6 2026, 2:56 PM

Looks ok to me. Of course, since we no longer
use Heimdal, I'm not sure it matters?
(Maybe to MFC to FreeBSD-14?)

This revision is now accepted and ready to land.Apr 6 2026, 2:56 PM

Revision Contents
Changeset List

PathSize
sys/
kgssapi/
krb5/
15 lines

Diff 174967

View Options

sys/kgssapi/krb5/krb5_mech.c

Loading...