[Bug 235296] www/nginx: spnego-http-auth-nginx-module crashes worker process due to read-after-free

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235296

            Bug ID: 235296
           Summary: www/nginx: spnego-http-auth-nginx-module crashes
                    worker process due to read-after-free
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: joneum at FreeBSD.org
          Reporter: topical at gmx.net
             Flags: maintainer-feedback?(joneum at FreeBSD.org)
          Assignee: joneum at FreeBSD.org

The current version uses putenv() to pass the name of the keytab to GSS.

Incorrectly, it assumes that putenv() creates a copy of the passed string. This
leads to corruption of environment variables and eventually to a core dump.
Usually, this happens unnoticed due to the auto-recovery feature of nginx work
process.

Actually, putenv isn't really needed anymore and the affected code can be
removed safely.

-- 
You are receiving this mail because:
You are the assignee for the bug.