Package: libpam-ldap
Version: 180-1.2
Severity: normal

I recently stumbled on a segfault in libpam-ldap, which has been fixed
upstream in pam_ldap-181:

http://bugzilla.padl.com/show_bug.cgi?id=254

Could this version (or a backported patch) be included in the upcoming etch
release?

FWIW, the backtrace I generated:

Program terminated with signal 11, Segmentation fault.
#0  0xa7ad4098 in pam_sm_acct_mgmt (pamh=0x80a6c90, flags=0, argc=0, argv=0x0)
    at pam_ldap.c:2357
2357      if (_has_deny_value (session->info->hosts_allow, h->h_name))
(gdb) bt
#0  0xa7ad4098 in pam_sm_acct_mgmt (pamh=0x80a6c90, flags=0, argc=0, argv=0x0)
    at pam_ldap.c:2357
#1  0xa7f339ea in _pam_dispatch (pamh=0x80a6c90, flags=0, choice=3)
    at pam_dispatch.c:83
#2  0xa7f35a9c in pam_acct_mgmt (pamh=0x0, flags=0) at pam_account.c:20
#3  0x0806d4c2 in do_pam_account () at ../auth-pam.c:866
#4  0x080594f5 in userauth_finish (authctxt=0x80a6b20, authenticated=1, 
    method=0x80af338 "publickey") at ../auth2.c:234
#5  0x08059446 in input_userauth_request (type=50, seq=7, ctxt=0x80a6b20)
    at ../auth2.c:207
#6  0x0808328a in dispatch_run (mode=0, done=0x80a6b20, ctxt=0x80a6b20)
    at ../dispatch.c:93
#7  0x08058f2b in do_authentication2 (authctxt=0x80a6b20) at ../auth2.c:98
#8  0x080505eb in main (ac=3, av=0x80a3018) at ../sshd.c:1777
(gdb) print session->info->hosts_allow   
$7 = (char **) 0x80b9560
(gdb) print session->info->hosts_allow[0]
$8 = 0x80bb8a0 "*"
(gdb) print session->info->hosts_allow[1]
$9 = 0x0
(gdb) print h                            
$10 = 0

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libpam-ldap depends on:
ii  debconf [debconf-2.0]  1.5.8             Debian configuration management sy
ii  libc6                  2.3.6.ds1-7       GNU C Library: Shared libraries
ii  libldap2               2.1.30-3frontier2 OpenLDAP libraries
ii  libpam0g               0.79-4            Pluggable Authentication Modules l

libpam-ldap recommends no packages.

-- debconf information:
* shared/ldapns/base-dn: [snip]
* shared/ldapns/ldap-server: [snip]
* libpam-ldap/pam_password: exop
* libpam-ldap/binddn: [snip]
* libpam-ldap/rootbinddn: [snip]
* libpam-ldap/dbrootlogin: true
* libpam-ldap/override: true
* shared/ldapns/ldap_version: 3
* libpam-ldap/dblogin: true


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to