[SSSD] [PATCH] Sanitize username during initgroups call

Stephen Gallagher sgallagh at redhat.com
Wed May 25 14:42:15 UTC 2011


On Wed, 2011-05-25 at 12:49 +0200, Jakub Hrozek wrote:
> On 05/25/2011 11:07 AM, Sumit Bose wrote:
> > Hi,
> > 
> > Kaushik found a code path where we didn't sanitize the user name. To
> > reproduce it try to authentication as an LDAP user with a user name like
> > 'user\01'. It is important to have '\0' followed by other characters in
> > the name.
> > 
> > The attached patch should fix the issue. The related trac ticket is
> > #639.
> > 
> > bye,
> > Sumit
> > 
> > 
> 
> Ack


Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110525/0d0db278/attachment.sig>


More information about the sssd-devel mailing list