[sudo-commits] sudo changeset 12974:a26461ccf891

[Todd C. Miller]

changeset:	12974:a26461ccf891 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/a26461ccf891
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Sat Feb 13 11:54:21 2021 -0700

Log Message:
	If sudo_getgrouplist2() returns -1, clamp ngroups based on max_groups.
	The ngroups parameter is an out parameter that is filled in with
	the actual number of groups, which may be less than the static
	number allocated when max_groups is set in sudo.conf.
	Fixes a potential out of bounds read found by LLVM libFuzzer.

diffstat:

 plugins/sudoers/pwutil_impl.c |  4 +++-
 src/sudo.c                    |  8 +++++---
 2 files changed, 8 insertions(+), 4 deletions(-)