[Bug 1650] GSSAPI code can only accept connections for the gethostbyname() name.

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Jan 13 11:14:14 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1650

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2010-01-13 11:14:13 EST ---
(From update of attachment 1696)
I think this is addressed by bug #928 which is targeted (but not yet
committed) for the next release.

>+         if (0 != (p = getenv("GSS_HOSTNAME"))) {
>+            strncpy(lname,p,MAXHOSTNAMELEN);

If the environment variable is longer than MAXHOSTNAMELEN then lname
will end up unterminated.  You should use strlcpy instead.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list