Gert Doering has uploaded a new patch set (#2) to the change originally created
by Răzvan Cojocaru. ( https://gerrit.openvpn.net/c/openvpn/+/2128?usp=email )
The following approvals got outdated and were removed:
Code-Review+2 by Gert Doering
Change subject: openvpnserv: don't return freed token groups from
GetTokenGroups()
......................................................................
openvpnserv: don't return freed token groups from GetTokenGroups()
When the second GetTokenInformation() call failed, the freed buffer was
returned. IsUserInGroup() then read it and IsAuthorizedUser() freed it
again. Return NULL, which IsUserInGroup() already handles by skipping
the token group check.
Broken since e82733a1 ("Fix user's group membership check in
interactive service to work with domains").
Change-Id: I5542520825112dfd64aab332bd76333b74d7fec0
Signed-off-by: Razvan Cojocaru <[email protected]>
Acked-by: Gert Doering <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/2128
Message-Id: <[email protected]>
URL:
https://lore.kernel.org/openvpn-devel/[email protected]
Signed-off-by: Gert Doering <[email protected]>
---
M src/openvpnserv/validate.c
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.openvpn.net:29418/openvpn refs/changes/28/2128/2
diff --git a/src/openvpnserv/validate.c b/src/openvpnserv/validate.c
index 6a13a06..2858f62 100644
--- a/src/openvpnserv/validate.c
+++ b/src/openvpnserv/validate.c
@@ -227,6 +227,7 @@
{
MsgToEventLog(M_SYSERR, L"GetTokenInformation");
free(groups);
+ groups = NULL;
}
return groups;
}
--
To view, visit https://gerrit.openvpn.net/c/openvpn/+/2128?usp=email
To unsubscribe, or for help writing mail filters, visit
https://gerrit.openvpn.net/settings?usp=email
Gerrit-MessageType: newpatchset
Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I5542520825112dfd64aab332bd76333b74d7fec0
Gerrit-Change-Number: 2128
Gerrit-PatchSet: 2
Gerrit-Owner: Răzvan Cojocaru <[email protected]>
Gerrit-Reviewer: Arne Schwabe <[email protected]>
Gerrit-Reviewer: Gert Doering <[email protected]>
Gerrit-CC: openvpn-devel <[email protected]>
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
