Skip to content

Conversation

MegaManSec
Copy link

Various non-serious security issues, and some other stuff.

@@ -3112,6 +3114,10 @@ static int lsapi_initSuEXEC()
if ( !s_defaultUid || !s_defaultGid )
{
pw = getpwnam( "nobody" );
if(!pw) {
perror( "Can't get uid for user 'nobody'" );
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wrong indent

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed.
In nano, the indenting they use shows as the same as a tab.

@smalyshev smalyshev added the Bug label Jan 23, 2015
if ( !pReq || !name )
return NULL;

struct LSAPI_key_value_pair * pBegin = pReq->m_pEnvList;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This wouldn't work for standard C compiler - definitions should come before the code.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Then should the if(!pReq) code be removed? Because a null pointer dereference will occur before it reachs that.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would suggest splitting the definitions and the assignment if you need check before the assignment.

@MegaManSec
Copy link
Author

I'm going to close this, but if you could manually cherrypick the changes, that would be great.

Thanks

@MegaManSec MegaManSec closed this Feb 2, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants