[SSSD] [PATCH] RESPONDER: Ensure that all input strings are valid UTF-8

Jakub Hrozek jhrozek at redhat.com
Wed Nov 16 14:18:58 UTC 2011


On Wed, Nov 16, 2011 at 08:29:52AM -0500, Stephen Gallagher wrote:
> On Tue, 2011-11-15 at 17:40 +0100, Jakub Hrozek wrote:
> > On Mon, Nov 14, 2011 at 11:35:04AM -0500, Stephen Gallagher wrote:
> > > Fixes https://fedorahosted.org/sssd/ticket/1088
> > > 
> > 
> > The approach prevents the dbus crash, but I think you also need to check
> > the name during nss_cmd_initgroups()
> 
> Thanks for catching that. Fixed.
> 
> I also attached a test program I used to verify the fixes. When this
> program is run (link it against -lpam and -lpam_misc), it would cause
> the sssd_nss or sssd_pam processes to crash. I just commented out all
> but one at a time to test each of the processes.

Ack



More information about the sssd-devel mailing list