Todd C. Miller 08b0b626f1 Fix a potential use-after-free in conversation function. ...

The prompt passed in to sudo_pam_verify() will be freed later by
check_user_interactive() so we need to reset the stashed value.
From Pavel Heimlich.  Bug #967.

2021-03-03 08:19:44 -07:00

..

afs.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

aix_auth.c

Fix some warnings from pvs-studio

2020-08-12 13:45:09 -06:00

API

Add a force flag to sudo_auth_cleanup() to force immediate cleanup.

2020-04-01 14:41:38 -06:00

bsdauth.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

dce.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

fwtk.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

kerb5.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

pam.c

Fix a potential use-after-free in conversation function.

2021-03-03 08:19:44 -07:00

passwd.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

rfc1938.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

secureware.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

securid5.c

Fix some warnings from pvs-studio

2020-08-12 13:45:09 -06:00

sia.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

sudo_auth.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

sudo_auth.h

Add a force flag to sudo_auth_cleanup() to force immediate cleanup.

2020-04-01 14:41:38 -06:00