diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2013-04-05 17:02:20 +0200 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-04-08 23:47:23 +0200 |
commit | a28391f68a09eaedbe1a515f513ca56bbb94d7a5 (patch) | |
tree | 7c64db5073623d05c8ebe9bbc2ba08a08439f406 /src/responder/pam/pamsrv.h | |
parent | 827e8dbc3c792ed34b0608c3bd3a4d7b0eedf4f5 (diff) | |
download | sssd-a28391f68a09eaedbe1a515f513ca56bbb94d7a5.tar.gz sssd-a28391f68a09eaedbe1a515f513ca56bbb94d7a5.tar.xz sssd-a28391f68a09eaedbe1a515f513ca56bbb94d7a5.zip |
Allocate PAM DP request data on responder context
https://fedorahosted.org/sssd/ticket/1869
Currently the private data passed to the PAM request is a structure
allocated on the client context. But in the odd case where the back end
would be stopped or stuck until the idle timeout hits, the DP callback
would access data that were freed when the client timed out.
This patch introduces a new structure allocated on responder context,
whose only purpose is to live as long as the request is active.
Diffstat (limited to 'src/responder/pam/pamsrv.h')
-rw-r--r-- | src/responder/pam/pamsrv.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/responder/pam/pamsrv.h b/src/responder/pam/pamsrv.h index 3617231d0..129419b56 100644 --- a/src/responder/pam/pamsrv.h +++ b/src/responder/pam/pamsrv.h @@ -39,6 +39,10 @@ struct pam_ctx { hash_table_t *id_table; }; +struct pam_auth_dp_req { + struct pam_auth_req *preq; +}; + struct pam_auth_req { struct cli_ctx *cctx; struct sss_domain_info *domain; @@ -50,6 +54,8 @@ struct pam_auth_req { struct ldb_result *res; bool check_provider; void *data; + + struct pam_auth_dp_req *dpreq_spy; }; struct sss_cmd_table *get_pam_cmds(void); |