[Bug 235296] www/nginx: spnego-http-auth-nginx-module crashes worker process due to read-after-free
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Tue Jan 29 14:01:29 UTC 2019
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235296
Bug ID: 235296
Summary: www/nginx: spnego-http-auth-nginx-module crashes
worker process due to read-after-free
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: Individual Port(s)
Assignee: joneum at FreeBSD.org
Reporter: topical at gmx.net
Flags: maintainer-feedback?(joneum at FreeBSD.org)
Assignee: joneum at FreeBSD.org
The current version uses putenv() to pass the name of the keytab to GSS.
Incorrectly, it assumes that putenv() creates a copy of the passed string. This
leads to corruption of environment variables and eventually to a core dump.
Usually, this happens unnoticed due to the auto-recovery feature of nginx work
process.
Actually, putenv isn't really needed anymore and the affected code can be
removed safely.
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list