[SSSD] [PATCH] Sanitize username during initgroups call

Jakub Hrozek jhrozek at redhat.com
Wed May 25 10:49:06 UTC 2011


On 05/25/2011 11:07 AM, Sumit Bose wrote:
> Hi,
> 
> Kaushik found a code path where we didn't sanitize the user name. To
> reproduce it try to authentication as an LDAP user with a user name like
> 'user\01'. It is important to have '\0' followed by other characters in
> the name.
> 
> The attached patch should fix the issue. The related trac ticket is
> #639.
> 
> bye,
> Sumit
> 
> 

Ack

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110525/e57d6609/attachment.sig>


More information about the sssd-devel mailing list