Alejandro Colomar 71a3238b79 src/usermod.c: update_gshadow_file(): Fix RESOURCE_LEAK (CWE-772) ...

Report:
> shadow-4.15.0/src/usermod.c:864:3: alloc_fn: Storage is returned from allocation function "__sgr_dup".
> shadow-4.15.0/src/usermod.c:864:3: var_assign: Assigning: "nsgrp" = storage returned from "__sgr_dup(sgrp)".
> shadow-4.15.0/src/usermod.c:964:1: leaked_storage: Variable "nsgrp" going out of scope leaks the storage it points to.
> 962|                   free (nsgrp);
> 963|           }
> 964|-> }
> 965|   #endif                                /* SHADOWGRP */
> 966|

Link: https://issues.redhat.com/browse/RHEL-35383
Reported-by: Iker Pedrosa <ipedrosa@redhat.com>
Signed-off-by: Alejandro Colomar <alx@kernel.org>

2024-05-20 09:37:01 +02:00

..

.gitignore

getsubids: system binary for user's sub*ids

2021-11-17 16:35:50 +01:00

.indent.pro

[svn-upgrade] Integrating new upstream version, shadow (4.0.8)

2007-10-07 11:46:07 +00:00

chage.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

check_subid_range.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

chfn.c

lib/, src/: Remove all code wrapped in defined(USE_NIS)

2024-03-14 16:12:51 -05:00

chgpasswd.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

chpasswd.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

chsh.c

lib/, src/: Remove all code wrapped in defined(USE_NIS)

2024-03-14 16:12:51 -05:00

expiry.c

Adding checks for fd omission

2024-03-10 19:56:40 -05:00

faillog.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

free_subid_range.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

get_subid_owners.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

getsubids.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

gpasswd.c

Adding checks for fd omission

2024-03-10 19:56:40 -05:00

groupadd.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

groupdel.c

lib/, src/: Remove all code wrapped in defined(USE_NIS)

2024-03-14 16:12:51 -05:00

groupmems.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

groupmod.c

lib/, src/: Remove all code wrapped in defined(USE_NIS)

2024-03-14 16:12:51 -05:00

groups.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

grpck.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

grpconv.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

grpunconv.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

id.c

lib/, src/: Use int main(void) where appropriate

2024-03-14 16:16:15 -05:00

lastlog.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

login_nopam.c

src/login_nopam.c: Add missing 'const'

2023-12-04 11:45:09 +01:00

login.c

src/login.c: Use localtime_r(3) instead of localtime(3)

2024-03-24 00:16:00 +01:00

logoutd.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

Makefile.am

Remove libcrack support

2023-11-25 21:24:38 -06:00

new_subid_range.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

newgidmap.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

newgrp.c

Adding checks for fd omission

2024-03-10 19:56:40 -05:00

newuidmap.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

newusers.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

nologin.c

Update licensing info

2021-12-23 19:36:50 -06:00

passwd.c

lib/, src/: str2*(): Rename functions and reorder parameters

2024-03-29 14:29:13 -05:00

pwck.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

pwconv.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

pwunconv.c

Hardcoding Prog to known value

2024-03-07 22:23:04 +01:00

su.c

Adding checks for fd omission

2024-03-10 19:56:40 -05:00

suauth.c

Remove superfluous casts

2023-02-09 10:03:03 -06:00

sulogin.c

src/sulogin.c: Invert logic to reduce indentation

2024-03-14 16:16:15 -05:00

useradd.c

src/useradd.c: set_defaults(): Fix FILE* leak

2024-05-18 01:15:10 +02:00

userdel.c

lib/, src/: Remove all code wrapped in defined(USE_NIS)

2024-03-14 16:12:51 -05:00

usermod.c

src/usermod.c: update_gshadow_file(): Fix RESOURCE_LEAK (CWE-772)

2024-05-20 09:37:01 +02:00

vipw.c

src/vipw.c: Use string literals to initialize 'Prog'

2024-03-08 10:24:15 -06:00