Seg fault in pam_krb-1.0.3

James F.Hranicky jfh at cise.ufl.edu
Wed Mar 5 10:00:12 EST 2003


I found a pointer bug that causes a segfault in pam_krb5-1.0.3:

In pam_krb5_prompter.c the following variables are defined:

    const struct pam_message **conv_arg;
    struct pam_message  *msg, **p;

further down in the file, the following assignment is made:

    conv_arg = (const struct pam_message **)msg;

assigning a (pam_message *) to a (pam_message **). The attached patch 
fixes the problem.

----------------------------------------------------------------------
| Jim Hranicky, Senior SysAdmin                   UF/CISE Department |
| E314D CSE Building                            Phone (352) 392-1499 |
| jfh at cise.ufl.edu                      http://www.cise.ufl.edu/~jfh |
----------------------------------------------------------------------
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: pam_krb5_prompter.c.patch.txt
Url: http://mailman.mit.edu/pipermail/kerberos/attachments/20030305/48686eeb/attachment.txt


More information about the Kerberos mailing list