Hi Jim, On Thu, Jul 14, 2016 at 04:02:18PM -0400, Jim Paris wrote: > With a pam configuration like: > > password required pam_passwdqc.so min=disabled,8,8,7,7 retry=1 non-unix > random=32 enforce=users > > The passwdqc module fails with a segmentation fault. This is because, > in non-unix mode, pam_sm_chauthtok builds up a fake "struct passwd" on > the stack:
Thank you for reporting this bug. I can confirm it from looking at the source code, although the segfault does not happen for me - I guess a valid pointer just happens to be in that stack location on my system. I intend to fix it shortly and put out a new upstream passwdqc release, which Debian would then need to update to. Alexander
