[Fwd: action.size can be used without previously being assigned to inpam_xauth.c]

[Andrew Morgan <morgan@transmeta.com>]

I'm not at all familiar with pam_xauth. Perhpas someone that ships it
can offer some insight into this problem?

Thanks

Andrew

--- Begin Message ---

• To: <morgan@kernel.org>
• Subject: action.size can be used without previously being assigned to inpam_xauth.c
• From: Shlomi Fish <shlomif@vipe.technion.ac.il>
• Date: Thu, 3 Jan 2002 13:06:46 +0200 (IST)

In pam_xauth.c:

The function do_file makes use of an action struct. One of the things it
does is trunacate its length to action.size and then mmap it. However, the
function mangle_refcount calls it without necessarily assigning a.size to
something.

This causes su to generate a very large file under
~/.xauth/refcount/root/localhost.localdomain/unix\:0 and then it dies with
a "Bus Error" signal.

Please let me know when a fix is available.

Regards,

	Shlomi Fish


 --


----------------------------------------------------------------------
Shlomi Fish        shlomif@vipe.technion.ac.il
Home Page:         http://t2.technion.ac.il/~shlomif/
Home E-mail:       shlomif@techie.com

He who re-invents the wheel, understands much better how a wheel works.

--- End Message ---