xdm: Changes to 'master'

Alan Coopersmith alanc at kemper.freedesktop.org
Fri Jun 7 16:27:14 PDT 2013


 greeter/verify.c |    5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

New commits:
commit 8d1eb5c74413e4c9a21f689fc106949b121c0117
Author: mancha <mancha1 at hush.com>
Date:   Wed May 22 07:20:26 2013 -0700

    Handle NULL returns from glibc 2.17+ crypt().
    
    Starting with glibc 2.17 (eglibc 2.17), crypt() fails with EINVAL
    (w/ NULL return) if the salt violates specifications. Additionally,
    on FIPS-140 enabled Linux systems, DES/MD5-encrypted passwords
    passed to crypt() fail with EPERM (w/ NULL return).
    
    If using glibc's crypt(), check return value to avoid a possible
    NULL pointer dereference.
    
    Reviewed-by: Matthieu Herrb <matthieu at herrb.eu>
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>



More information about the xorg-commit mailing list