shadow/src
Samanta Navarro 8e0ad48c21 Prevent out of boundary access
If lines start with '\0' then it is possible to trigger out of
boundary accesses.

Check if indices are valid before accessing them.

Signed-off-by: Samanta Navarro <ferivoz@riseup.net>
2023-02-01 15:47:35 -06:00
..
.gitignore getsubids: system binary for user's sub*ids 2021-11-17 16:35:50 +01:00
.indent.pro [svn-upgrade] Integrating new upstream version, shadow (4.0.8) 2007-10-07 11:46:07 +00:00
chage.c chage: Fix regression in print_date 2022-10-05 12:43:45 +02:00
check_subid_range.c Make shadow_logfd and Prog not extern 2021-12-23 15:18:07 -06:00
chfn.c chfn: new_fields: fix wrong fields printed 2022-12-23 09:04:02 +01:00
chgpasswd.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
chpasswd.c chpasswd: add IS_CRYPT_METHOD 2022-04-03 21:07:09 -05:00
chsh.c Supporting vendor given -shells- configuration file 2023-01-26 22:45:32 -06:00
expiry.c Assume SIGTSTP is defined 2022-12-15 16:22:05 -06:00
faillog.c Initialize local variables 2022-05-24 07:49:11 -05:00
free_subid_range.c Declare file local functions static 2022-01-03 15:09:17 +01:00
get_subid_owners.c Declare file local functions static 2022-01-03 15:09:17 +01:00
getsubids.c Declare file local functions static 2022-01-03 15:09:17 +01:00
gpasswd.c Assume SIGTSTP is defined 2022-12-15 16:22:05 -06:00
groupadd.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
groupdel.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
groupmems.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
groupmod.c Fix typos in length calculations 2022-12-22 10:34:04 +01:00
groups.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
grpck.c Declare read-only lookup pointers const 2022-01-03 15:09:17 +01:00
grpconv.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
grpunconv.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
id.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
lastlog.c lastlog: check for localtime() return value 2022-10-07 09:53:02 -05:00
login_nopam.c Prevent out of boundary access 2023-02-01 15:47:35 -06:00
login.c Drop redundant declaration 2023-01-25 12:31:17 +01:00
logoutd.c Cosmetic fixes 2022-12-22 10:31:43 +01:00
Makefile.am Supporting vendor given -shells- configuration file 2023-01-26 22:45:32 -06:00
new_subid_range.c Declare file local functions static 2022-01-03 15:09:17 +01:00
newgidmap.c Avoid comparisons of different signs 2023-01-25 12:31:17 +01:00
newgrp.c Fix typos 2023-01-26 22:44:39 -06:00
newuidmap.c Avoid comparisons of different signs 2023-01-25 12:31:17 +01:00
newusers.c Don't test for NULL before calling free(3) 2022-09-29 16:03:53 +02:00
nologin.c Update licensing info 2021-12-23 19:36:50 -06:00
passwd.c Replace the deprecated getpass(3) by our agetpass() 2022-12-05 10:47:19 +01:00
pwck.c src: correct "badname" option 2022-05-06 10:13:51 -05:00
pwconv.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
pwunconv.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
su.c Use strlcpy(3) instead of its pattern 2022-12-22 18:03:39 -06:00
suauth.c Prevent out of boundary access 2023-02-01 15:47:35 -06:00
sulogin.c Drop redundant declaration 2023-01-25 12:31:17 +01:00
useradd.c Fix typos 2023-01-26 22:44:39 -06:00
userdel.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
usermod.c fix usermod -rG x y while user y is not in group x will cause user y add into group x 2022-10-06 20:29:44 -05:00
vipw.c Remove redeclared variable 2022-05-24 07:49:11 -05:00