Displaying 1 result from an estimated 1 matches for "check_authkeys_file".
2016 Dec 30
12
[Bug 2655] New: AuthorizedKeysCommand with large output can deadlock
...a
deadlock can result. The relevant code is in auth2-pubkey.c, beginning
at line 1041:
if ((pid = subprocess("AuthorizedKeysCommand", pw, command,
ac, av, &f)) == 0)
goto out;
uid_swapped = 1;
temporarily_use_uid(pw);
ok = check_authkeys_file(f, options.authorized_keys_command,
key, pw);
if (exited_cleanly(pid, "AuthorizedKeysCommand", command) != 0)
goto out;
Upon finding the correct public key in the command's output, we
immediately wait() for the command to exit. However, the command may
contin...