sssd.git/src/sss_client, branch sysdb

nfs idmap: fix infinite loop

2016-01-05T11:40:11+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2909

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Noam Meltzer

sssd_client: Do not use removed memory cache

2015-11-11T17:05:34+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2726

Reviewed-by: Michal Židek

sss_client: Fix underflow of active_threads

2015-11-11T17:05:28+00:00

If the memory cache was not initialized and there was a failure in
initialisation of memory cache context (e.g. memory cache file
does not exist) then mc_context had to be destroyed to release
resources.

However the count of active threads in sss_cli_mc_ctx is already higher
than zero because current thread is working wih the mc_context.
But this counter was zero-ed with memset in sss_nss_mc_destroy_ctx
due to issue with initialisation of memory cache.
Then we have to decrease counter of active thread in function
sss_nss_mc_get_ctx because initialisation of mc failed.
And the result of this decrement is underflow of counter.

Related to:
https://fedorahosted.org/sssd/ticket/2726

Reviewed-by: Michal Židek

BUILD: Remove sudo doxygen file

2015-11-05T12:18:27+00:00

There aren't any documented files in directory src/sss_client/sudo/

Reviewed-by: Jakub Hrozek

util: Continue if setlocale fails

2015-11-04T08:08:12+00:00

setlocale needs some environment variables
to be set in order to work. These variables
are not present in some special cases. We
should not fail completely in these cases
but continue with the compatible C locale.

Resolves:
https://fedorahosted.org/sssd/ticket/2785

Reviewed-by: Michal Židek

Fix memory leak in sssdpac_verify()

2015-09-23T14:38:03+00:00

Resolves https://fedorahosted.org/sssd/ticket/2803

Reviewed-by: Sumit Bose

Remove trailing whitespace

2015-09-03T07:42:58+00:00

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Nikolai Kondrashov

sssd: incorrect checks on length values during packet decoding

2015-08-31T16:34:26+00:00

https://fedorahosted.org/sssd/ticket/1697

It is safer to isolate the checked (unknown/untrusted)
value on the left hand side in the conditions
to avoid overflows/underflows.

Reviewed-by: Petr Cech

UTIL: Function 2string for enum sss_cli_command

2015-08-31T16:30:19+00:00

Improvement of debug messages.
Instead of:"(0x0400): Running command [17]..."
We could see:"(0x0400): Running command [17][SSS_NSS_GETPWNAM]..."
(It's not used in sss_client. There are only hex numbers of commands.)

Resolves:
https://fedorahosted.org/sssd/ticket/2708

Reviewed-by: Lukáš Slebodník

sss_client: Update integrity check of records in mmap cache

2015-08-05T09:28:27+00:00

The function sss_nss_mc_get_record return copy of record from memory
cache in last argument. Because we should not access data directly
to avoid problems with consistency of record.
The function sss_nss_mc_get_record also check whether length of record
is within data area (with macro MC_CHECK_RECORD_LENGTH)

However we also tried to do the same check in functions sss_nss_mc_get{gr, pw}*
Pointer to end of strings in record was compared to pointer to the end
of data table. But these two pointers are not within the same allocated area
and does not make sense to compare them. Sometimes record can be allocated
before mmaped area and sometime after. Sometimes it will return cached data
and other time will fall back to responder.

Resolves:
https://fedorahosted.org/sssd/ticket/2743

Reviewed-by: Michal Židek