VesperOS/shadow
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8424d7c49462a6587c773f9b08c1867d7750f5ec
shadow/lib
History
Alejandro Colomar 8424d7c494 lib/sgetgrent.c: sgetgrent(): Fix use-after-free bug 
We were reusing a leftover from parsing a previous line if
(i == NFIELDS-1).  A few lines below this check, we use read the element
in [3] (that is, [NFIELDS-1]), without having written it in this call.

Be stricter, and require that all NFIELDS fields are found.

Fixes: 45c6603cc8 (2007-10-07, "[svn-upgrade] Integrating new upstream version, shadow (19990709)")
Closes: <https://github.com/shadow-maint/shadow/issues/1144>
Cc: Serge Hallyn <serge@hallyn.com>
Cc: Iker Pedrosa <ipedrosa@redhat.com>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
2024-12-09 19:46:29 -06:00
..
alloc
lib/alloc/realloc*.h: Always reallocate at least 1 byte
2024-10-22 10:53:06 +02:00
atoi
lib/atoi/strtoi/, tests/: strto[iu]_(): 1 is an invalid base
2024-07-11 22:42:58 -05:00
fs/readlink
lib/fs/readlink/areadlink.h: areadlink(): Use PATH_MAX instead of a magic value
2024-11-01 21:25:50 -05:00
string
lib/string/strchr/: strchrcnt(): Add function
2024-11-10 23:07:19 -06:00
time
lib/, src/: Use %F instead of %Y-%m-%d with strftime(3)
2024-08-22 22:51:57 -05:00
.indent.pro
[svn-upgrade] Integrating new upstream version, shadow (4.0.8)
2007-10-07 11:46:07 +00:00
addgrps.c
lib/, src/: Use strsep(3) instead of strtok(3)
2024-12-05 15:33:32 -06:00
adds.c
lib/, tests/: addsl(): Add addsl(), a variadic macro
2024-01-16 16:58:18 +01:00
adds.h
lib/, tests/: addsl(): Add addsl(), a variadic macro
2024-01-16 16:58:18 +01:00
age.c
lib/: Saturate addition to avoid overflow
2024-02-13 16:02:49 -06:00
agetpass.c
lib/alloc/, lib/, src/, tests/: Organize the allocation APIs in a new subdirectory
2024-07-01 21:40:11 -05:00
agetpass.h
lib/agetpass.[ch]: add function ro read from pipe
2024-01-31 22:16:02 -06:00
attr.h
lib/attr.h: ATTR_STRING(): It only accepts one argument
2024-07-08 20:25:01 -05:00
audit_help.c
lib/, src/: Rename 'unused' macro as 'MAYBE_UNUSED'
2024-01-30 16:19:56 +01:00
basename.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
bit.c
lib, libmisc: Move source files to lib (where their headers were)
2023-08-30 17:22:38 +02:00
bit.h
lib: bit_ceil_wrapul(): stop recursion
2023-02-24 12:44:14 -06:00
btrfs.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
cast.h
lib/cast.h: const_cast(): Reimplement with _Generic(3)
2024-06-04 09:10:23 +02:00
chkname.c
lib/chkname.c: is_valid_{user,group}_name(): Set errno to distinguish the reasons
2024-09-01 08:17:11 -05:00
chkname.h
lib/chkname.[ch]: login_name_max_size(): Add function
2024-05-21 13:26:41 +02:00
chowndir.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
chowntty.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
cleanup_group.c
lib/, src/: Rename 'unused' macro as 'MAYBE_UNUSED'
2024-01-30 16:19:56 +01:00
cleanup_user.c
lib/, src/: Rename 'unused' macro as 'MAYBE_UNUSED'
2024-01-30 16:19:56 +01:00
cleanup.c
Fix typos
2024-09-13 22:27:08 +02:00
commonio.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
commonio.h
lib/: Use 'restrict' alongside [[gnu::access()]]
2024-01-15 13:14:28 -06:00
console.c
lib/, src/: Use strsep(3) instead of strtok(3)
2024-12-05 15:33:32 -06:00
copydir.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
csrand.c
lib/csrand.c: csrand(): Use read(2) instead of fread(2)
2024-12-01 21:43:25 -06:00
defines.h
src/passwd.c: inconsistent password length limit
2024-02-16 15:46:08 -06:00
encrypt.c
Merge pull request #451 from hallyn/2021-12-05/license
2022-01-02 18:38:42 -06:00
env.c
lib/alloc/, lib/, src/, tests/: Organize the allocation APIs in a new subdirectory
2024-07-01 21:40:11 -05:00
exitcodes.h
Update licensing info
2021-12-23 19:36:50 -06:00
faillog.h
Update licensing info
2021-12-23 19:36:50 -06:00
failure.c
lib/: Move memzero.[ch] under lib/string/memset/
2024-08-30 21:44:07 -05:00
failure.h
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
fd.c
Adding checks for fd omission
2024-03-10 19:56:40 -05:00
fields.c
lib/fields.c: Remove dead code
2024-10-30 21:15:30 -05:00
find_new_gid.c
lib/find_new_[gu]id.c: include stdint.h for UINT16_MAX/UINT32_MAX
2024-07-08 01:19:49 +02:00
find_new_sub_gids.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
find_new_sub_uids.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
find_new_uid.c
Fix typos
2024-09-13 22:27:08 +02:00
fputsx.c
lib/, src/: Use NULL instead of 0 as a null pointer constant
2024-11-13 09:44:54 -06:00
freezero.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
freezero.h
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
get_pid.c
lib/string/sprintf/, lib/, src/, tests/: Move all sprintf(3)-like APIs to a subdirectory
2024-07-01 21:40:11 -05:00
getdate.h
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
getdate.y
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
getdef.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
getdef.h
Improve the login.defs unknown item error message
2023-10-20 18:46:23 -05:00
getgr_nam_gid.c
lib/: Don't open-code get_gid()
2024-06-29 20:00:18 +02:00
getrange.c
lib/atoi/, *: Split files
2024-07-11 22:42:58 -05:00
gettime.c
lib/atoi/, *: Split files
2024-07-11 22:42:58 -05:00
groupio.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
groupio.h
Update licensing info
2021-12-23 19:36:50 -06:00
groupmem.c
lib/: Chain free(strzero(s))
2024-08-30 21:44:07 -05:00
gshadow_.h
lib/gshadow_.h: __STDC__ is always 1
2024-12-01 22:04:24 -06:00
gshadow.c
lib/gshadow.c: build_list(): Transform while loop into for loop
2024-12-05 21:20:59 -06:00
hushed.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
idmapping.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
idmapping.h
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
isexpired.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
limits.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
list.c
lib/, src/: Use !streq() instead of its pattern
2024-12-01 22:23:19 -06:00
lockpw.c
Don't redefine errno(3)
2022-12-22 11:43:29 +01:00
log.c
lib/: Move memzero.[ch] under lib/string/memset/
2024-08-30 21:44:07 -05:00
logind.c
lib/, src/: Make the use of MAYBE_UNUSED macro consistent
2024-01-30 16:19:56 +01:00
loginprompt.c
lib/loginprompt.c: login_prompt(): Use strtcpy() instead of its pattern
2024-10-30 21:52:21 -05:00
mail.c
lib/alloc/, lib/, src/, tests/: Organize the allocation APIs in a new subdirectory
2024-07-01 21:40:11 -05:00
Makefile.am
lib/string/strchr/: strchrcnt(): Add function
2024-11-10 23:07:19 -06:00
motd.c
lib/, src/: Use strsep(3) instead of strtok(3)
2024-12-05 15:33:32 -06:00
must_be.h
lib/: Use multi-line macro definitions
2024-07-01 21:40:11 -05:00
myname.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
nscd.c
Don't redefine errno(3)
2022-12-22 11:43:29 +01:00
nscd.h
* configure.in, lib/nscd.h, lib/nscd.c: Added --with-nscd flag to
2008-08-30 18:30:36 +00:00
nss.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
obscure.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
pam_defs.h
Declare constant data structure const
2023-01-25 12:31:17 +01:00
pam_pass_non_interactive.c
lib/: Chain free(strzero(s))
2024-08-30 21:44:07 -05:00
pam_pass.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
port.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
port.h
Update licensing info
2021-12-23 19:36:50 -06:00
prefix_flag.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
prototypes.h
lib/, po/, src/: get_uid(): Move function to "atoi/getnum.h"
2024-06-29 20:00:18 +02:00
pwauth.c
lib/: Move memzero.[ch] under lib/string/memset/
2024-08-30 21:44:07 -05:00
pwauth.h
Add header guards
2022-05-24 07:49:11 -05:00
pwd2spwd.c
lib/, src/: Remove SCALE definition
2024-01-05 15:41:12 -06:00
pwd_init.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
pwdcheck.c
lib/, src/: Rename 'unused' macro as 'MAYBE_UNUSED'
2024-01-30 16:19:56 +01:00
pwio.c
lib/: Remove incorrect /*@out@*/ comment from functions that read the pointee
2024-01-15 13:14:28 -06:00
pwio.h
Update licensing info
2021-12-23 19:36:50 -06:00
pwmem.c
lib/: Chain free(strzero(s))
2024-08-30 21:44:07 -05:00
readpassphrase.c
contrib, lib/, src/, tests/: Use stpcpy(3) instead of its pattern
2024-07-03 10:03:12 -05:00
readpassphrase.h
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
remove_tree.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
root_flag.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
run_part.c
lib/, src/: Use NULL instead of 0 as a null pointer constant
2024-11-13 09:44:54 -06:00
run_part.h
lib/run_part: Reduce visibility
2024-09-18 14:52:05 +02:00
salt.c
lib/, src/: Use !streq() instead of its pattern
2024-12-01 22:23:19 -06:00
selinux.c
selinux: use type safe function pointer assignment
2023-03-20 08:47:52 +01:00
semanage.c
lib/, src/: Rename 'unused' macro as 'MAYBE_UNUSED'
2024-01-30 16:19:56 +01:00
setugid.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
setupenv.c
lib/, src/: Use stpspn() instead of its pattern
2024-10-13 20:40:02 -05:00
sgetgrent.c
lib/sgetgrent.c: sgetgrent(): Fix use-after-free bug
2024-12-09 19:46:29 -06:00
sgetpwent.c
lib/, src/: Use NULL instead of 0 as a null pointer constant
2024-11-13 09:44:54 -06:00
sgetspent.c
lib/atoi/, *: Split files
2024-07-11 22:42:58 -05:00
sgroupio.c
lib/: Chain free(strzero(s))
2024-08-30 21:44:07 -05:00
sgroupio.h
Update licensing info
2021-12-23 19:36:50 -06:00
shadow.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
shadowio.c
lib/: Remove incorrect /*@out@*/ comment from functions that read the pointee
2024-01-15 13:14:28 -06:00
shadowio.h
Update licensing info
2021-12-23 19:36:50 -06:00
shadowlog_internal.h
lib: Fix typo
2024-09-18 14:52:05 +02:00
shadowlog.c
lib: provide default values for shadow_progname/shadow_logfd
2021-12-27 16:28:23 +00:00
shadowlog.h
Drop obsolete prototype for log_dolog()
2022-08-06 11:27:56 -05:00
shadowmem.c
lib/: Chain free(strzero(s))
2024-08-30 21:44:07 -05:00
shell.c
lib/string/sprintf/, lib/, src/, tests/: Move all sprintf(3)-like APIs to a subdirectory
2024-07-01 21:40:11 -05:00
sizeof.h
lib/sizeof.h: memberof(): Add macro
2024-02-20 18:53:53 +01:00
spawn.c
lib/: Use 'restrict' alongside [[gnu::access()]]
2024-01-15 13:14:28 -06:00
sssd.c
contrib, lib/, src/, tests/: Use stpcpy(3) instead of its pattern
2024-07-03 10:03:12 -05:00
sssd.h
Flush sssd caches in addition to nscd caches
2018-09-13 14:20:02 +02:00
strtoday.c
lib/, src/: Use stpspn() instead of its pattern
2024-10-13 20:40:02 -05:00
sub.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
subordinateio.c
lib/, src/: Use !streq() instead of its pattern
2024-12-01 22:23:19 -06:00
subordinateio.h
libsubid: Add routine to free allocated memory
2024-06-12 21:45:31 +02:00
sulog.c
lib/, src/: Always pass NULL to time(2)
2024-07-01 21:40:11 -05:00
tcbfuncs.c
lib/, src/: Use !streq() instead of its pattern
2024-12-01 22:23:19 -06:00
tcbfuncs.h
* lib/tcbfuncs.h: Re-indent.
2010-03-18 19:23:00 +00:00
ttytype.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
typetraits.h
lib/typetraits.h: Add macros that give information about a type
2024-06-29 20:00:18 +02:00
tz.c
lib: Eliminate dead code
2024-09-29 12:23:05 +02:00
ulimit.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
user_busy.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
utmp.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
valid.c
contrib/, lib/, src/: Use streq() instead of its pattern
2024-12-01 22:23:19 -06:00
write_full.c
libmisc/write_full.c: Improve write_full()
2023-08-18 20:35:15 -05:00
xgetgrgid.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
xgetgrnam.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
xgetpwnam.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
xgetpwuid.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
xgetspnam.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
xgetXXbyYY.c
lib/alloc/, lib/, src/, tests/: Organize the allocation APIs in a new subdirectory
2024-07-01 21:40:11 -05:00
xprefix_getpwnam.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00
yesno.c
lib: Merge libmisc into libshadow
2023-08-31 08:55:26 +02:00