]> git.ipfire.org Git - thirdparty/shadow.git/commit
lib/sgetgrent.c: fix null pointer dereference
authorSamanta Navarro <ferivoz@riseup.net>
Fri, 12 Jan 2024 11:49:27 +0000 (11:49 +0000)
committerSerge Hallyn <serge@hallyn.com>
Mon, 15 Jan 2024 19:06:35 +0000 (13:06 -0600)
commita9e07c0feb43ae074e7969b8847250d225dbda22
tree39571db0bd4096faa1b616ab8469113f0126fd9b
parent4c0c7c52f14382f7b6f7e36337d28c4460923db4
lib/sgetgrent.c: fix null pointer dereference

If reallocation fails in function list, then reset the size to 0 again.
Without the reset, the next call assumes that `members` points to
a memory location with reserved space.

Also use size_t instead of int for size to prevent signed integer
overflows. The length of group lines is not limited.

Fixes 45c0003e53ab671c63dcd530fd9f3245d3b29e76 (4.14 release series)

Reviewed-by: Alejandro Colomar <alx@kernel.org>
Signed-off-by: Samanta Navarro <ferivoz@riseup.net>
lib/sgetgrent.c