Todd C. Miller
|
65df01dd71
|
Add more passes to policy fuzzer
Now execises list, list other user and show_version.
|
2021-02-25 15:27:46 -07:00 |
|
Todd C. Miller
|
b3b80fe6df
|
Implement sudoers_policy_deregister_hooks()
Register/deregister hooks in fuzz_policy and also call show_version().
|
2021-02-25 15:02:09 -07:00 |
|
Todd C. Miller
|
e6dc13229f
|
Add sudoers debug register/deregister.
|
2021-02-25 13:35:29 -07:00 |
|
Todd C. Miller
|
05767145b3
|
Add fuzzer-specific stubs source file.
|
2021-02-24 16:43:59 -07:00 |
|
Todd C. Miller
|
a3f38fac0c
|
Set program name in fuzzers so we get consisten warnings.
|
2021-02-24 15:14:58 -07:00 |
|
Todd C. Miller
|
9d27880af8
|
Use real eventlog config fuctions instead of stubs.
|
2021-02-24 15:08:53 -07:00 |
|
Todd C. Miller
|
f35d9c8be1
|
fuzz_printf and fuzz_conversation can be stubs.
|
2021-02-24 11:31:43 -07:00 |
|
Todd C. Miller
|
d02cc9c3ac
|
Call list, validate and invalidate entry points too.
We need a separate open/close for each one.
|
2021-02-18 15:09:26 -07:00 |
|
Todd C. Miller
|
f76c59fc8f
|
Restore the check for sudoers_policy.close == NULL.
The fuzzers run as part of "make check" too in which case NO_LEAKS
won't be defined and the close function will be set to NULL.
|
2021-02-18 07:58:34 -07:00 |
|
Todd C. Miller
|
ae3a098d2f
|
Always dynamically allocate user_cmnd, it is freed in sudo_user_free().
Instead of setting user_cmnd in the policy functions, always set argv.
Calling sudoers_policy_main() with argc of 0 is no longer allowed.
|
2021-02-16 09:32:34 -07:00 |
|
Todd C. Miller
|
52e3fcc795
|
Free struct sudo_user in sudoers_policy_close() and sudoers_cleanup().
Also, do not NULL out the close function if NO_LEAKS is defined.
|
2021-02-15 08:29:47 -07:00 |
|
Todd C. Miller
|
7f3c670a13
|
Fix sudoers garbage collection and run it in policy fuzzer.
|
2021-02-14 14:01:31 -07:00 |
|
Todd C. Miller
|
561740cd54
|
Always dynamically allocate user_role, user_type, user_privs, user_limitprivs
|
2021-02-14 07:47:48 -07:00 |
|
Todd C. Miller
|
776c57a81e
|
Move create_admin_success_flag() to timestamp.c.
|
2021-02-13 15:48:21 -07:00 |
|
Todd C. Miller
|
651a225a4a
|
The push() function was not updating the size after reallocating.
|
2021-02-13 12:54:22 -07:00 |
|
Todd C. Miller
|
df2931588a
|
Fuzz sudoers policy module API.
Includes a test case to reproduce CVE-2021-3156.
|
2021-02-12 15:36:18 -07:00 |
|