emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity
c43681a068
shadow/src
History
Tobias Stoeckmann 7d82f203ee Reset pid_child only if waitpid was successful. 
Do not reset the pid_child to 0 if the child process is still
running. This else-condition can be reached with pid being -1,
therefore explicitly test this condition.

This is a regression fix for CVE-2017-2616. If su receives a
signal like SIGTERM, it is not propagated to the child.

Reported-by: Radu Duta <raduduta@gmail.com>
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
2017-05-14 17:58:10 +02:00
..
.gitignore Ignore generated newgidmap and newuidmap 2013-08-11 14:48:39 +02:00
.indent.pro [svn-upgrade] Integrating new upstream version, shadow (4.0.8) 2007-10-07 11:46:07 +00:00
chage.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
chfn.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
chgpasswd.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
chpasswd.c Make the sp_lstchg shadow field reproducible. 2017-04-10 22:29:21 +01:00
chsh.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
expiry.c Fixed signal races in shadow tools. 2016-07-02 18:11:09 +02:00
faillog.c * src/faillog.c: The fail_max field is a short, use a short also 2011-11-19 21:44:34 +00:00
gpasswd.c Fixed signal races in shadow tools. 2016-07-02 18:11:09 +02:00
groupadd.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
groupdel.c Merge pull request #4 from xnox/master 2015-11-12 23:07:29 -06:00
groupmems.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
groupmod.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
groups.c * src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c, 2010-08-22 19:36:09 +00:00
grpck.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
grpconv.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
grpunconv.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
id.c * src/newgrp.c: Limit the scope of variable pid. 2010-03-23 11:26:34 +00:00
lastlog.c Add ability to clear or set lastlog record for user via lastlog command 2016-03-03 15:37:01 +01:00
login_nopam.c * src/newgrp.c: Limit the scope of variable pid. 2010-03-23 11:26:34 +00:00
login.c Fixed signal races in shadow tools. 2016-07-02 18:11:09 +02:00
logoutd.c * src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c, 2010-08-22 19:36:09 +00:00
Makefile.am shadow: Add auditing support to su 2016-12-13 18:44:19 +02:00
newgidmap.c Fixed typos in new{g,u}idmap tools. 2016-07-02 16:39:18 +02:00
newgrp.c Fix a resource leak in syslog_sg 2015-08-06 00:25:01 -05:00
newuidmap.c Fixed typos in new{g,u}idmap tools. 2016-07-02 16:39:18 +02:00
newusers.c Make the sp_lstchg shadow field reproducible. 2017-04-10 22:29:21 +01:00
nologin.c * src/nologin.c: Include <stdlib.h> to get EXIT_FAILURE. 2009-05-09 13:14:23 +00:00
passwd.c Make the sp_lstchg shadow field reproducible. 2017-04-10 22:29:21 +01:00
pwck.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
pwconv.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
pwunconv.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
su.c Reset pid_child only if waitpid was successful. 2017-05-14 17:58:10 +02:00
suauth.c * lib/prototypes.h, src/suauth.c, src/su.c (check_su_auth): Do not 2011-06-13 18:26:26 +00:00
sulogin.c Fixed signal races in shadow tools. 2016-07-02 18:11:09 +02:00
useradd.c Make the sp_lstchg shadow field reproducible. 2017-04-10 22:29:21 +01:00
userdel.c Do not fail on missing files in /etc/, create them instead. 2015-02-27 17:01:29 +00:00
usermod.c Make the sp_lstchg shadow field reproducible. 2017-04-10 22:29:21 +01:00
vipw.c Improve vipw error report when editor fails 2013-08-25 16:27:58 +02:00