[Bug 242690] Re: might allow to bypass authentication

2009-07-21 Thread Thierry Carrez
The operator precedence you quote from line 696 looks like the fixed one, not the buggy one ? -- might allow to bypass authentication https://bugs.launchpad.net/bugs/242690 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs

[Bug 242690] Re: might allow to bypass authentication

2009-07-14 Thread reidmefirst
Naive question about a bug that was closed a year ago... Can a user do a similar thing with pam_pgsql when changing her password? For example the operator precedence in pam_sm_chauthtok() line 696 is: if ((rc = pam_get_pass(pamh, PAM_OLDAUTHTOK, &pass, PASSWORD_PROMPT, options->std_flags)) == PAM