emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

* src/login.c: Erase the username later since it it used for the

Browse Source 
fake password check (in case of empty password).
This commit is contained in:
nekral-guest 2008-09-20 20:05:22 +00:00
parent 11c7543c76
commit c8d2175981
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -8,6 +8,8 @@
* src/login.c: Make sure a username is specified with -f. * src/login.c: Make sure a username is specified with -f.
* src/login.c: Explicitly tag the end of the #ifdef RLOGIN * src/login.c: Explicitly tag the end of the #ifdef RLOGIN
sections. sections.
* src/login.c: Erase the username later since it it used for the
fake password check (in case of empty password).
2008-09-20 Nicolas François <nicolas.francois@centraliens.net> 2008-09-20 Nicolas François <nicolas.francois@centraliens.net>

10
src/login.c
View File

@ -975,14 +975,13 @@ int main (int argc, char **argv)
failent.ut_type = USER_PROCESS; failent.ut_type = USER_PROCESS;
failtmp (&failent); failtmp (&failent);
} }
free (username);
username = NULL;
retries--; retries--;
if (retries <= 0) { if (retries <= 0) {
SYSLOG ((LOG_CRIT, "REPEATED login failures%s", SYSLOG ((LOG_CRIT, "REPEATED login failures%s",
fromhost)); fromhost));
} }
/* /*
* If this was a passwordless account and we get here, login * If this was a passwordless account and we get here, login
* was denied (securetty, faillog, etc.). There was no * was denied (securetty, faillog, etc.). There was no
@ -994,6 +993,13 @@ int main (int argc, char **argv)
pw_auth ("!", username, reason, (char *) 0); pw_auth ("!", username, reason, (char *) 0);
} }
/*
* Authentication of this user failed.
* The username must be confirmed in the next try.
*/
free (username);
username = NULL;
/* /*
* Wait a while (a la SVR4 /usr/bin/login) before attempting * Wait a while (a la SVR4 /usr/bin/login) before attempting
* to login the user again. If the earlier alarm occurs * to login the user again. If the earlier alarm occurs