isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Zero old pw_passwd before replacing with version from shadow file.

Browse Source
This commit is contained in:
Todd C. Miller
2005-03-19 03:08:40 +00:00
parent 6666ca23d4
commit ca7c435740
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
pwutil.c
View File

@@ -215,6 +215,7 @@ sudo_getpwuid(uid)
{ {
struct passwd key, *pw; struct passwd key, *pw;
struct rbnode *node; struct rbnode *node;
char *cp;
key.pw_uid = uid; key.pw_uid = uid;
if ((node = rbfind(pwcache_byuid, &key)) != NULL) { if ((node = rbfind(pwcache_byuid, &key)) != NULL) {
@@ -226,7 +227,11 @@ sudo_getpwuid(uid)
*/ */
if ((pw = getpwuid(uid)) != NULL) { if ((pw = getpwuid(uid)) != NULL) {
pw = sudo_pwdup(pw); pw = sudo_pwdup(pw);
pw->pw_passwd = sudo_getepw(pw); /* get shadow password */ cp = sudo_getepw(pw); /* get shadow password */
if (pw->pw_passwd != NULL)
zero_bytes(pw->pw_passwd, strlen(pw->pw_passwd));
pw->pw_passwd = cp;
if (rbinsert(pwcache_byname, (VOID *) pw) != NULL) if (rbinsert(pwcache_byname, (VOID *) pw) != NULL)
errorx(1, "unable to cache user name, already exists"); errorx(1, "unable to cache user name, already exists");
if (rbinsert(pwcache_byuid, (VOID *) pw) != NULL) if (rbinsert(pwcache_byuid, (VOID *) pw) != NULL)
@@ -265,7 +270,11 @@ sudo_getpwnam(name)
*/ */
if ((pw = getpwnam(name)) != NULL) { if ((pw = getpwnam(name)) != NULL) {
pw = sudo_pwdup(pw); pw = sudo_pwdup(pw);
pw->pw_passwd = sudo_getepw(pw); /* get shadow password */ cp = sudo_getepw(pw); /* get shadow password */
if (pw->pw_passwd != NULL)
zero_bytes(pw->pw_passwd, strlen(pw->pw_passwd));
pw->pw_passwd = cp;
if (rbinsert(pwcache_byname, (VOID *) pw) != NULL) if (rbinsert(pwcache_byname, (VOID *) pw) != NULL)
errorx(1, "unable to cache user name, already exists"); errorx(1, "unable to cache user name, already exists");
if (rbinsert(pwcache_byuid, (VOID *) pw) != NULL) if (rbinsert(pwcache_byuid, (VOID *) pw) != NULL)