URL: https://github.com/SSSD/sssd/pull/5417
Author: alexey-tikhonov
Title: #5417: KCM: avoid NULL deref
Action: opened
PR body:
"""
Fixes following issue:
```
/src/responder/kcm/kcmsrv_op_queue.c:129: check_after_deref: Null-checking "entry" suggests that it may be null, but it has already been dereferenced on all paths leading to the check.
# 127| terminating = entry->queue->qctx->kctx->rctx->shutting_down;
# 128|
# 129|-> if (entry == NULL) {
# 130| return 1;
# 131| /* Prevent use-after-free of req when shutting down with non-empty queue */
```
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5417/head:pr5417
git checkout pr5417
URL: https://github.com/SSSD/sssd/pull/5415
Author: scabrero
Title: #5415: winbind idmap plugin: Fix struct idmap_domain definition
Action: opened
PR body:
"""
The patch for samba bug 13052 was backported to samba >= 4.7.4 adding
the dom_sid field to the idmap_domain struct.
This missmatch in the struct definition causes the plugin to fail
all unixids_to_sids and sids_to_unixids calls with
NT_STATUS_INVALID_PARAMETER for samba versions between 4.7.4 and 4.8.
Signed-off-by: Samuel Cabrero <scabrero(a)suse.de>
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5415/head:pr5415
git checkout pr5415
URL: https://github.com/SSSD/sssd/pull/5416
Author: sumit-bose
Title: #5416: fp: fix original fix use-after-free - 1.16 version
Action: opened
PR body:
"""
This should have been a cherry-pick of
3b158934cbb8f87cbfaf1650389b8dcd654b92ca but the cherry-pick of the
original patch was broken and placed the change into a different function.
This patch fixes this by directly placing the change at the right place.
Resolves:
https://github.com/SSSD/sssd/issues/5382
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5416/head:pr5416
git checkout pr5416
URL: https://github.com/SSSD/sssd/pull/5370
Author: deastoe
Title: #5370: nss: Use posix_fallocate() to alloc memcache file
Action: opened
PR body:
"""
If sssd_nss starts up while the filesystem where the memcache files
will reside (SSS_NSS_MCACHE_DIR) does not have sufficient space,
sssd_nss can be killed by SIGBUS while attempting to write to the
mmap()'d address space.
Replace the ftruncate() call with posix_fallocate(), which will fail
in this scenario, so we can detect the condition and continue startup
without the memcache functionality.
Fixes #5369
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5370/head:pr5370
git checkout pr5370
URL: https://github.com/SSSD/sssd/pull/5399
Author: scabrero
Title: #5399: winbind idmap plugin: Fix struct idmap_domain definition
Action: opened
PR body:
"""
The patch for samba bug 13052 was backported to samba >= 4.7.4 adding
the dom_sid field to the idmap_domain struct.
This missmatch in the struct definition causes the plugin to fail
all unixids_to_sids and sids_to_unixids calls with
NT_STATUS_INVALID_PARAMETER for samba versions between 4.7.4 and 4.8.
Signed-off-by: Samuel Cabrero <scabrero(a)suse.de>
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5399/head:pr5399
git checkout pr5399
URL: https://github.com/SSSD/sssd/pull/5411
Author: sumit-bose
Title: #5411: ifp: fix original fix use-after-free
Action: opened
PR body:
"""
The original fix stole the fqdn too earlier. Only for SSS_DP_USER
requests the steal is important. For other request where the first
result is returned to the caller the original version
might even cause issues since the name does not belong to the memory
hierarchy of the result anymore.
Resolves: https://github.com/SSSD/sssd/issues/5382
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5411/head:pr5411
git checkout pr5411
URL: https://github.com/SSSD/sssd/pull/5398
Author: justin-stephenson
Title: #5398: krb5: Remove secrets text from drop-in KCM file
Action: opened
PR body:
"""
On my Fedora system I get `Failed to enable unit: Unit file sssd-secrets.socket does not exist.`
I believe this secrets socket is no longer needed after KCM was decoupled from secrets.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5398/head:pr5398
git checkout pr5398
URL: https://github.com/SSSD/sssd/pull/5414
Author: alexey-tikhonov
Title: #5414: SYSDB: merge_res_sysdb_attrs() fixed to avoid NULL ptr in msgs[]
Action: opened
PR body:
"""
This helps to avoid sssd_be segfaults at be_refresh_get_values_ex() due to NULL
ptrs in results of sysdb_search_with_ts_attr()
Resolves: https://github.com/SSSD/sssd/issues/5412
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5414/head:pr5414
git checkout pr5414