[Bug 808] segfault if not using pam/keyboard-interactive mech and password's expired

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=808





------- Additional Comments From buckh at pobox.com  2004-03-05 08:04 -------
if you don't authenticate via pam/keyboard-interactive, then when
do_pam_account figures out your password is expired and calls
pam_password_change_required, the latter will probably segfault when it
dereferences the uninitialized int *force_pwchange. this is b/c, if you
don't authenticate using the PRIVSEP(sshpam_device), sshpam_init_ctx is
never called, so force_pwchange isn't properly initialized

i'll attach a workaround patch, but not without serious misgivings about
how crappy it is, so it won't hurt my feelings if you come up with a much
better fix

all in all, though, 3.8p1 does password-changing and chauthtok-ing
much better than it's predecessor, so thanks again for the great work

--buck

------- Additional Comments From buckh at pobox.com  2004-03-05 08:06 -------
Created an attachment (id=568)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=568&action=view)
referenced patch




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.