[SSSD] [PATCH] NSS: Fix segfault when mmap cache cannot be initialized

Jakub Hrozek jhrozek at redhat.com
Wed May 23 14:52:07 UTC 2012


On Wed, May 23, 2012 at 09:03:16AM -0400, Stephen Gallagher wrote:
> If the mmap cache cannot be initialized (such as insufficient
> permissions or SELinux/AppArmor denial), we are supposed to fall back to
> our 1.8 behavior of LDB cache only. However, we weren't properly
> checking that the cache had been set up and we were always attempting to
> dereference the mmap context in fill_pwent() and fill_grent().
> 
> Fixes https://fedorahosted.org/sssd/ticket/1346

I think we should do the same for sss_mmap_cache_gr_store, too. And
perhaps do the check inside the functions themselves and not the callers
so that we don't forget to add the check when we add a new call of these
functions.



More information about the sssd-devel mailing list