68ef824a5f
And also ...
- Related: upstream#941 - return multiple server addresses to the Kerberos
locator plugin
- Related: upstream#3652 - kdcinfo doesn't get populated for other domains
- Resolves: upstream#3747 - sss_ssh_authorizedkeys exits abruptly if SSHD
closes its end of the pipe before reading all the
SSH keys
- Resolves: upstream#3607 - Handle conflicting e-mail addresses more gracefully
- Resolves: upstream#3754 - SSSD AD uses LDAP filter to detect POSIX attributes
stored in AD GC also for regular AD DC queries
- Related: upstream#3219 - [RFE] Regular expression used in sssd.conf not being
able to consume an @-sign in the user/group name.
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
36 lines
1.3 KiB
Diff
36 lines
1.3 KiB
Diff
From 4e851d1391f56c632c271fd21dd96f29565cadfe Mon Sep 17 00:00:00 2001
|
|
From: Sumit Bose <sbose@redhat.com>
|
|
Date: Tue, 22 May 2018 18:03:05 +0200
|
|
Subject: [PATCH] krb5 locator: make plugin more robust
|
|
|
|
Although currently libkrb5 sets all parameters of the locator plugin
|
|
calls to suitable values we should make sure that provided pointers are
|
|
not NULL before trying to dereference them.
|
|
|
|
Related to https://pagure.io/SSSD/sssd/issue/941
|
|
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
|
|
|
|
(cherry picked from commit c1fbc6b64ecaf51efc4379c4c8a4960de095abf0)
|
|
---
|
|
src/krb5_plugin/sssd_krb5_locator_plugin.c | 4 ++++
|
|
1 file changed, 4 insertions(+)
|
|
|
|
diff --git a/src/krb5_plugin/sssd_krb5_locator_plugin.c b/src/krb5_plugin/sssd_krb5_locator_plugin.c
|
|
index 58cac7f4b244903347e6f1811cd8de2d61281c4f..9874fd2d1ce63b69099f057dd05f6e353a12ce75 100644
|
|
--- a/src/krb5_plugin/sssd_krb5_locator_plugin.c
|
|
+++ b/src/krb5_plugin/sssd_krb5_locator_plugin.c
|
|
@@ -439,6 +439,10 @@ krb5_error_code sssd_krb5_locator_lookup(void *private_data,
|
|
if (private_data == NULL) return KRB5_PLUGIN_NO_HANDLE;
|
|
ctx = (struct sssd_ctx *) private_data;
|
|
|
|
+ if (realm == NULL || cbfunc == NULL || cbdata == NULL) {
|
|
+ return KRB5_PLUGIN_NO_HANDLE;
|
|
+ }
|
|
+
|
|
if (ctx->disabled) {
|
|
PLUGIN_DEBUG(("Plugin disabled, nothing to do.\n"));
|
|
return KRB5_PLUGIN_NO_HANDLE;
|
|
--
|
|
2.17.1
|
|
|