[Bug 268033] x11/xscreensaver: Crashing and dumping core on unlock

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 10 Jan 2023 08:28:34 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268033

Felix Palmen <zirias@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |zirias@freebsd.org

--- Comment #13 from Felix Palmen <zirias@freebsd.org> ---
It looks pretty suspicious that it's again a call to strlen() that bombs, so
first thing I would verify is that the pam_exec.so is *indeed* the patched
version.

What architecture is this and how exactly did you install (or update) your base
system?

Then, of course, what are the contents of /usr/local/etc/pam.d/xscreensaver
and, if it's included as expected, /etc/pam.d/system?

A stacktrace with some actual info would certainly be helpful as well.


FWIW, I just checked the source of xscreensaver-auth for direct calls to
strlen(), there are only two of them and they both seem perfectly safe.

-- 
You are receiving this mail because:
You are on the CC list for the bug.