mirror of
https://git.openafs.org/openafs.git
synced 2025-01-18 15:00:12 +00:00
OPENAFS-SA-2018-002 kaserver: prevent KAM_ListEntry information leak
KAM_ListEntry (kas list) does not initialize its output correctly. It leaks kaserver memory contents over the wire: struct kaindex - up to 64 bytes for member name - up to 64 bytes for member instance Initialize the buffer. [kaduk@mit.edu: move initialization to top of server routine] Change-Id: I5cc430fc996e7e89d38a384d092b9d4fad248fa4
This commit is contained in:
parent
be0142707c
commit
b604ee7add
@ -1700,6 +1700,7 @@ kamListEntry(struct rx_call *call,
|
||||
afs_int32 caller;
|
||||
struct kaentry tentry;
|
||||
|
||||
memset(name, 0, sizeof(*name));
|
||||
COUNT_REQ(ListEntry);
|
||||
if ((code = InitAuthServ(&tt, LOCKREAD, this_op)))
|
||||
return code;
|
||||
|
Loading…
Reference in New Issue
Block a user