Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Dec 2002 23:16:25 -0800 (PST)
From:      =?ISO-8859-1?Q?Mikko_Ty=F6l=E4j=E4rvi?= <mbsd@pacbell.net>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        openpam@thinksec.com
Subject:   bin/46628: rshd crash, openpam bug, patch included
Message-ID:  <20021229230516.C18514-100000@atlas.home>

next in thread | raw e-mail | index | archive | help


>Number:         46628
>Category:       bin
>Synopsis:       rshd crash, openpam bug, patch included
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Dec 29 23:20:01 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     Mikko Tyolajarvi
>Release:        FreeBSD 5.0-CURRENT sparc64
>Organization:
>Environment:
System: FreeBSD sparc.home 5.0-CURRENT FreeBSD 5.0-CURRENT #12: Sun Dec 29 21:26:00 PST 2002 mikko@sparc.home:/usr/obj/usr/src/sys/SPARC64 sparc64

>Description:

Trying to access a 5.0 box using rsh crashes rshd in pam_putenv() due
to a bogus return value from openpam_findenv().

>How-To-Repeat:

  sparc% echo localhost > .rhosts
  sparc% rsh localhost date
  sparc% dmesg | tail -1
  pid 1916 (rshd), uid 0: exited on signal 11

>Fix:

--- DIFF begins here ---
Index: openpam_impl.h
===================================================================
RCS file: /home/ncvs/src/contrib/openpam/lib/openpam_impl.h,v
retrieving revision 1.1.1.9
diff -u -r1.1.1.9 openpam_impl.h
--- openpam_impl.h	16 Dec 2002 15:28:02 -0000	1.1.1.9
+++ openpam_impl.h	30 Dec 2002 06:57:19 -0000
@@ -153,7 +153,7 @@
 #define ENTER()
 #define RETURNV() return
 #define RETURNC(c) return (c)
-#define RETURNI(n) return (i)
+#define RETURNI(i) return (i)
 #define RETURNP(p) return (p)
 #define RETURNS(s) return (s)
 #endif
--- DIFF ends here ---



>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021229230516.C18514-100000>