Skip to content

Fix issue with newer glibc crypt() function

Saul Wold openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2tinylogin: fix segfault from crypt()meta/recipes-core/tinylogin/tinylogin-1.4/glibc_crypt_fix.patch meta/recipes-core/tinylogin/tinylogin_1.4.bb+26 -10 replies
2/2shadow: add patch to fix crypt: Invalid Argumentmeta/recipes-extended/shadow/files/slackware_fix_for_glib-2.17_crypt.patch meta/recipes-extended/shadow/shadow_4.1.4.3.bb+64 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/2] Fix issue with newer glibc crypt() function

The 2.17 version of glibc's crypt() was changed to returning NULL if it got an invalid seed, this broke tinylogin and shadow in different ways.

Thanks to the Slackware team for "just in time patches", they found it first in shadow around March 28th!

I do not believe that these will introduce any security concerns, please review with a careful eye.

Sau!

Saul Wold (2):
tinylogin: fix segfault from crypt()
shadow: add patch to fix crypt: Invalid Argument

 .../tinylogin/tinylogin-1.4/glibc_crypt_fix.patch  | 23 ++++++++
 meta/recipes-core/tinylogin/tinylogin_1.4.bb       |  4 +-
 .../files/slackware_fix_for_glib-2.17_crypt.patch  | 63 ++++++++++++++++++++++
 meta/recipes-extended/shadow/shadow_4.1.4.3.bb     |  1 +
 4 files changed, 90 insertions(+), 1 deletion(-)
 create mode 100644 meta/recipes-core/tinylogin/tinylogin-1.4/glibc_crypt_fix.patch
 create mode 100644 meta/recipes-extended/shadow/files/slackware_fix_for_glib-2.17_crypt.patch
Signature · 1 line
1.8.0.2