Security: gsu

[Chris Evans <chris ferret lmh ox ac uk>]

Hi,

Will only affect if built without PAM support. (I think)

gsu-helper.c

Func: helper_read_password()
{
  char password[BUFSIZ];
  int len;

  ... reads user supplied value into len ....
  ... I'm a bad guy so I pick -1 :-) ---

  if (len+1 > BUFSIZ) { get_out };

  .. we pass the check ..

  read(user_supplied_data, password, len);

and oh dear :-)

The signed/unsigned issues seem to be cropping up more and more...

Chris