Displaying 1 result from an estimated 1 matches for "structy".
Did you mean:
structs
2001 Dec 18
2
[PATCH]: Fix potential security hole in Cygwin version
...n check_nt_auth() is called
in auth1.c and auth2.c with implicitly dereferencing the pointer to struct
passwd to get the pw_uid member as parameter. This struct passwd pointer
can be NULL if the user isn't found in /etc/passwd. Other similar funcs
as auth_pam_password() are called getting the structy passwd pointer
itself as parameter, testing it for NULL inside of the function.
Changing the check_nt_auth() to behave that way and changing auth1.c and
auth2.c accordingly solves that problem.
Patch follows.
Thanks,
Corinna
Index: auth1.c
=======================================================...