[sudo-workers] segfault when #include directive is used in cycles

Daniel Kopecek dkopecek at redhat.com
Tue Feb 9 07:58:09 EST 2010


Hi,
 there is a bug in toke.c:_push_include causing a segfault when using a deep
sudoers tree structure (#include/#includedir). After fixing this issue there
seems to be another one causing a double-free. The patch attached contains
fixes to both issues, but I'm not sure whether the double-free fix is valid.

The #include(dir) bug is described here https://bugzilla.redhat.com/show_bug.cgi?id=561336

Dan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sudo-1.7.2p2-loopsegv2.patch
Type: text/x-patch
Size: 1139 bytes
Desc: not available
URL: </pipermail/sudo-workers/attachments/20100209/cee9611c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: </pipermail/sudo-workers/attachments/20100209/cee9611c/attachment-0001.bin>


More information about the sudo-workers mailing list