The following commit has been merged in the master branch:
commit 8d41bc24c51018a25eac49b3403cbb276713e1ad
Author: Russ Allbery <[email protected]>
Date:   Tue Apr 6 16:31:37 2010 -0700

    Reallocate memory in aklog for the AFS ID string
    
    aklog was previously writing the magic AFS ID string into previously
    alloated memory with sprintf, but the variable in question was only
    as long as the username, so this code could overwrite memory and lead
    to heap corruption.  Free previously allocated memory and use
    afs_asprintf to format the AFS ID string instead.
    
    Change-Id: I7649864817340764c39c176606a9a543c10983c9
    Reviewed-on: http://gerrit.openafs.org/1706
    Tested-by: Russ Allbery <[email protected]>
    Reviewed-by: Simon Wilkinson <[email protected]>
    Reviewed-by: Derrick Brashear <[email protected]>
    Tested-by: Derrick Brashear <[email protected]>

 src/aklog/aklog.c |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

-- 
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs

Reply via email to