Tobias Stoeckmann 7d82f203ee Reset pid_child only if waitpid was successful. ...

Do not reset the pid_child to 0 if the child process is still
running. This else-condition can be reached with pid being -1,
therefore explicitly test this condition.

This is a regression fix for CVE-2017-2616. If su receives a
signal like SIGTERM, it is not propagated to the child.

Reported-by: Radu Duta <raduduta@gmail.com>
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

2017-05-14 17:58:10 +02:00

..

.gitignore

Ignore generated newgidmap and newuidmap

2013-08-11 14:48:39 +02:00

.indent.pro

[svn-upgrade] Integrating new upstream version, shadow (4.0.8)

2007-10-07 11:46:07 +00:00

chage.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

chfn.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

chgpasswd.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

chpasswd.c

Make the sp_lstchg shadow field reproducible.

2017-04-10 22:29:21 +01:00

chsh.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

expiry.c

Fixed signal races in shadow tools.

2016-07-02 18:11:09 +02:00

faillog.c

* src/faillog.c: The fail_max field is a short, use a short also

2011-11-19 21:44:34 +00:00

gpasswd.c

Fixed signal races in shadow tools.

2016-07-02 18:11:09 +02:00

groupadd.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

groupdel.c

Merge pull request #4 from xnox/master

2015-11-12 23:07:29 -06:00

groupmems.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

groupmod.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

groups.c

* src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c,

2010-08-22 19:36:09 +00:00

grpck.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

grpconv.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

grpunconv.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

id.c

* src/newgrp.c: Limit the scope of variable pid.

2010-03-23 11:26:34 +00:00

lastlog.c

Add ability to clear or set lastlog record for user via lastlog command

2016-03-03 15:37:01 +01:00

login_nopam.c

* src/newgrp.c: Limit the scope of variable pid.

2010-03-23 11:26:34 +00:00

login.c

Fixed signal races in shadow tools.

2016-07-02 18:11:09 +02:00

logoutd.c

* src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c,

2010-08-22 19:36:09 +00:00

Makefile.am

shadow: Add auditing support to su

2016-12-13 18:44:19 +02:00

newgidmap.c

Fixed typos in new{g,u}idmap tools.

2016-07-02 16:39:18 +02:00

newgrp.c

Fix a resource leak in syslog_sg

2015-08-06 00:25:01 -05:00

newuidmap.c

Fixed typos in new{g,u}idmap tools.

2016-07-02 16:39:18 +02:00

newusers.c

Make the sp_lstchg shadow field reproducible.

2017-04-10 22:29:21 +01:00

nologin.c

* src/nologin.c: Include <stdlib.h> to get EXIT_FAILURE.

2009-05-09 13:14:23 +00:00

passwd.c

Make the sp_lstchg shadow field reproducible.

2017-04-10 22:29:21 +01:00

pwck.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

pwconv.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

pwunconv.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

su.c

Reset pid_child only if waitpid was successful.

2017-05-14 17:58:10 +02:00

suauth.c

* lib/prototypes.h, src/suauth.c, src/su.c (check_su_auth): Do not

2011-06-13 18:26:26 +00:00

sulogin.c

Fixed signal races in shadow tools.

2016-07-02 18:11:09 +02:00

useradd.c

Make the sp_lstchg shadow field reproducible.

2017-04-10 22:29:21 +01:00

userdel.c

Do not fail on missing files in /etc/, create them instead.

2015-02-27 17:01:29 +00:00

usermod.c

Make the sp_lstchg shadow field reproducible.

2017-04-10 22:29:21 +01:00

vipw.c

Improve vipw error report when editor fails

2013-08-25 16:27:58 +02:00