Skip to content

fix fuzzer error in krb5kdf #1648

@nhorman

Description

@nhorman

https://issues.oss-fuzz.com/issues/447104218

Looks like oss-fuzz found a heap overflow

Seems that we don't check the key length against the selected cipher when setting params, leading to a read beyond they key buffers boundary when we do the derivation

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions