]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: Ignore extra groups that don't fit in the buffer passed
authorjca@openbsd.org <jca@openbsd.org>
Mon, 4 Nov 2024 21:59:15 +0000 (21:59 +0000)
committerDamien Miller <djm@mindrot.org>
Wed, 6 Nov 2024 23:01:05 +0000 (10:01 +1100)
commit593a0b65c55c1e06a8c22b084aefc395aedb0127
treefdf0926159c96d1bb2b6be04e647c3283c49971f
parente7adebeff3a9d038d0eaeeb0fcefedf29acb7e90
upstream: Ignore extra groups that don't fit in the buffer passed

to getgrouplist(3)

Our kernel supports 16 groups (NGROUPS_MAX), but nothing prevents
an admin from adding a user to more groups.  With that tweak we'll keep
on ignoring them instead of potentially reading past the buffer passed to
getgrouplist(3).  That behavior is explicitely described in initgroups(3).

ok millert@ gilles@

OpenBSD-Commit-ID: a959fc45ea3431b36f52eda04faefc58bcde00db
.skipped-commit-ids
groupaccess.c