[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: telnetd from 0.4c dumps core



Time to learn gdb fast :)
Here's what I've got so far.

the top of the call stack looked like this:

krb5_rd_cred -> krb5_address_compare -> krb5_address_order

func krb5_rd_cred in rd_cred.c line 122:

	cmp = krb5_address_compare (context,
				    a,
				    enc_krb_cred_part.s_address);

here both a->addr_type and enc_krb_cred_part.s_address->addr_type
were 256.

a gets its addr_type from krb5_make_addrport which sets it to 
KRB5_ADDRESS_ADDRPORT (256).

line 115 in rd_creds.c:
	ret = krb5_make_addrport (context, &a,
				  auth_context->remote_address,
				  auth_context->remote_port);

However, in auth_context that krb5_rd_creds get called with
both remote_address->addr_type and local_address->addr_type are set to 2.

	-Richard