[SSSD] [PATCH] Add dns_discovery_domain option

Stephen Gallagher sgallagh at redhat.com
Thu Jun 24 13:29:57 UTC 2010


On 06/22/2010 11:46 AM, Jakub Hrozek wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 06/21/2010 03:32 PM, Stephen Gallagher wrote:
>> Nack. If you're going to add the option to upgrade_config.py, you also
>> need to check for _srv_ in the ldap_uri, ipa_server and krb5_kdcip.
>>
>> In the failover code, please don't use "domain". It's too easy to
>> confuse with SSSD domains. Please use dns_domain.
>>
>> +    domptr = strchr(fqdn, '.');
>> +    domptr++;
>> +    if (!domptr) {
>> +        *domain = talloc_strdup(mem_ctx, fqdn);
>>
>> This is a bug, if there is no '.' in the string, you will return NULL
>> and then increase it by one.
>>
>> Also, you should check if domptr+1 (after the dot) is a NULL-terminator
>> before calling talloc_strdup(just to be safe, in case we somehow got
>> 'hostname.' back as a reply from a broken DNS server)
>>
>> Otherwise, this looks pretty good.
>
> Thanks for the review, a new patch is attached.

Nack.

You need to check the dereference of domptr+1, not the pointer address.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list