[SSSD] [PATCH] Properly null-terminate socket path

Stephen Gallagher sgallagh at redhat.com
Mon Jun 14 21:00:24 UTC 2010


On 06/14/2010 10:41 AM, Jakub Hrozek wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 06/14/2010 04:13 PM, Stephen Gallagher wrote:
>> On 06/14/2010 10:10 AM, Stephen Gallagher wrote:
>>> https://fedorahosted.org/sssd/ticket/540
>>>
>>> It was unlikely, but if the path to the socket file exceeded 108
>>> characters, this strncpy would be unterminated and the results could be
>>> unexpected. This was not an exploitable vulnerability.
>>>
>>
>> I forgot to mention, this patch should apply to both master and sssd-1-2.
>>
>
> ACK

Pushed to master and sssd-1-2.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list