dovecot - Aug 2010 - dovecot-auth process crashed during pam login

Hello!

We experienced crashes of the dovecot-auth process during user
verification with pam_ssh.

After a little debugging I saw that pam_ssh and dovecot both provide a
buffer_free() function. During cleanup of pam_ssh the buffer_free() from
dovecot was called. The members of the buffer had all "out of bound"
addresses.

After rename the buffer_free() in dovecot the pam login works fine.

Cheer, Elmar


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dovecot_buffer_free.patch
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20100806/08e3fe97/attachment-0002.pl>

On 2010-08-06 14:30:21 +0200, Elmar Rudigier wrote:
> We experienced crashes of the dovecot-auth process during user
> verification with pam_ssh.
> 
> After a little debugging I saw that pam_ssh and dovecot both provide a
> buffer_free() function. During cleanup of pam_ssh the buffer_free() from
> dovecot was called. The members of the buffer had all "out of
bound"
> addresses.
> 
> After rename the buffer_free() in dovecot the pam login works fine.
diff -u is a bit more readable.

    darix

-- 
           openSUSE - SUSE Linux is my linux
               openSUSE is good for you
                   www.opensuse.org

On Fri, 2010-08-06 at 14:30 +0200, Elmar Rudigier wrote:
> After a little debugging I saw that pam_ssh and dovecot both provide a
> buffer_free() function. During cleanup of pam_ssh the buffer_free() from
> dovecot was called. The members of the buffer had all "out of
bound"
> addresses.
> 
> After rename the buffer_free() in dovecot the pam login works fine.
Why not rename it in pam_ssh? PAM is the library that is being used in
tons of different programs, and it should be the one to avoid symbol
conflicts.

Anyway, attached a simpler patch to fix this on Dovecot's side (but I'm
not including it).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: diff
Type: text/x-patch
Size: 306 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20100806/3b04b5a4/attachment-0002.bin>