Bug#817198: libpam-script: Segv crash with NULL pointer in pam_sm_chauthtok with bad input

2016-04-01 Thread Martijn van Brummelen
Hi Dave, > Package: libpam-script > Version: 1.1.7-1 > Severity: important > > Dear Maintainer, > > When passed an incorrect password on stdin, the passwd program crashes > in libpam-script when libpam-script is not configured (that is, > installed, but no configuration has been done). Thank you fo

Bug#817198: libpam-script: Segv crash with NULL pointer in pam_sm_chauthtok with bad input

2016-03-08 Thread Dave Olson
Package: libpam-script Version: 1.1.7-1 Severity: important Dear Maintainer, When passed an incorrect password on stdin, the passwd program crashes in libpam-script when libpam-script is not configured (that is, installed, but no configuration has been done). Here is a simple way to reproduce it