"Andrey A. Chernov" <[EMAIL PROTECTED]> writes:
> Bug: 
> getpwnum() (or getlogin() in earlier stage) may return NULL under
> various complex circumstanes, but following code not expect it and may
> cause NULL pointer reference and core dump.
> Fix:
> Add check for NULL and return PAM_AUTH_ERR

Approved (unless Mark objects).

Strictly speaking, I think getlogin() should be replaced with the
result of pam_get_item(PAM_RUSER), but that's separate issue.

Dag-Erling Smorgrav - [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to