[SSSD] [PATCH] Properly null-terminate socket path

Stephen Gallagher sgallagh at redhat.com
Mon Jun 14 14:13:32 UTC 2010


On 06/14/2010 10:10 AM, Stephen Gallagher wrote:
> https://fedorahosted.org/sssd/ticket/540
>
> It was unlikely, but if the path to the socket file exceeded 108
> characters, this strncpy would be unterminated and the results could be
> unexpected. This was not an exploitable vulnerability.
>

I forgot to mention, this patch should apply to both master and sssd-1-2.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list