[krbdev.mit.edu #9200] git commit

"Greg Hudson via RT" <[email protected]> Mon, 23 Mar 2026 13:13:51 -0400
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
Mon Mar 23 13:13:50 2026: Request 9200 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9200 >



Cap decoding GeneralTime when time_t is 32-bit

In k5_asn1_decode_generaltime(), on platforms with 32-bit time_t only,
yield the maximum possible timestamp value when the result would
exceed it.

This change addresses Windows clients and KDCs using timestamps in the
year 2100 to represent "never".  While it is not in general safe to
return the wrong value from an ASN.1 decoding function instead of an
error, 32-bit platforms are increasingly rare, and there no negative
ramifications are known at this time.

[[email protected]: added comment; rewrote commit message]

https://github.com/krb5/krb5/commit/7e0e602875075fe541d3ffa65acca2e3b94adcd0
Author: Michael Osipov <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 7e0e602875075fe541d3ffa65acca2e3b94adcd0
Branch: master
 src/lib/krb5/asn.1/asn1_encode.c | 15 +++++++++++++++
 1 file changed, 15 insertions(+)