Hello community,

here is the log from the commit of package pam_ssh for openSUSE:11.4
checked in at Thu Apr 21 00:17:52 CEST 2011.



--------
--- old-versions/11.4/all/pam_ssh/pam_ssh.changes       2010-02-01 
13:21:25.000000000 +0100
+++ 11.4/pam_ssh/pam_ssh.changes        2011-04-18 15:56:20.000000000 +0200
@@ -1,0 +2,5 @@
+Mon Apr 18 13:53:35 UTC 2011 - [email protected]
+
+- fix for bnc#688120 (pam_ssh double free)
+
+-------------------------------------------------------------------

Package does not exist at destination yet. Using Fallback 
old-versions/11.4/all/pam_ssh
Destination is old-versions/11.4/UPDATES/all/pam_ssh
calling whatdependson for 11.4-i586


New:
----
  pam_ssh-double-free.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ pam_ssh.spec ++++++
--- /var/tmp/diff_new_pack.Q3Annp/_old  2011-04-21 00:15:36.000000000 +0200
+++ /var/tmp/diff_new_pack.Q3Annp/_new  2011-04-21 00:15:36.000000000 +0200
@@ -1,7 +1,7 @@
 #
-# spec file for package pam_ssh (Version 1.97)
+# spec file for package pam_ssh
 #
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -24,11 +24,12 @@
 Group:          Productivity/Networking/SSH
 AutoReqProv:    on
 Version:        1.97
-Release:        3
+Release:        11.<RELEASE12>
 Summary:        PAM Module for SSH Authentication
 Url:            http://sourceforge.net/projects/pam-ssh/
 Source:         %{name}-%{version}.tar.bz2
 Source2:        baselibs.conf
+Patch0:         pam_ssh-double-free.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -46,6 +47,7 @@
 
 %prep
 %setup -q
+%patch0 -p1
 
 %build
 %{suse_update_config -f}

++++++ pam_ssh-double-free.patch ++++++
Index: pam_ssh-1.97/pam_ssh.c
===================================================================
--- pam_ssh-1.97.orig/pam_ssh.c
+++ pam_ssh-1.97/pam_ssh.c
@@ -627,7 +627,7 @@ pam_sm_open_session(pam_handle_t *pamh,
              * than the file creation time */
             if (retval = stat(per_agent, &stat_buf)) {
                 pam_ssh_log(LOG_ERR, "stat() failed on %s", per_agent);
-                free(per_agent);
+                pam_set_data(pamh, "ssh_agent_env_agent", NULL, NULL);
                 fclose(env_read);
                 return retval;
             }
@@ -646,7 +646,7 @@ pam_sm_open_session(pam_handle_t *pamh,
        if (start_agent) {
                 if ((env_write = open(per_agent, O_CREAT | O_WRONLY, S_IRUSR | 
S_IWUSR)) < 0) {
                         pam_ssh_log(LOG_ERR, "can't write to %s", per_agent);
-                        free(per_agent);
+                        pam_set_data(pamh, "ssh_agent_env_agent", NULL, NULL);
                         openpam_restore_cred(pamh);
                         return PAM_SERVICE_ERR;
                 }

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Remember to have fun...

-- 
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to