| commit | 620862049e72a9c8d95612728f8d3f5ff10cfcc4 | |
| author | Nicolas Williams <nico@twosigma.com> | |
| Thu, 12 Oct 2017 17:24:05 +0000 (12 12:24 -0500) | ||
| committer | Nico Williams <nico@cryptonector.com> | |
| Wed, 26 Dec 2018 04:11:19 +0000 (25 22:11 -0600) | ||
| tree | 88c9bda9ddf230b1a0ebf34cc0ee89ee742b90e5 | treesnapshot (tar.gz zip) |
| parent | 95eb83c42431e9cae43e25bb501ddffb9cf1fe33 | commitdiff |
Use roken_get_*() instead of getpwuuid()
Using non-reentrant getpwuid() (or getpwnam(), or getspnam()) can be
dangerous. We had a report of a login application / PAM that calls
those, and Heimdal, by calling them too, clobbered the cached struct
passwd used by the login app / PAM.
Using non-reentrant getpwuid() (or getpwnam(), or getspnam()) can be
dangerous. We had a report of a login application / PAM that calls
those, and Heimdal, by calling them too, clobbered the cached struct
passwd used by the login app / PAM.