[PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]

[Siddhesh Poyarekar]

On Mon, Mar 16, 2015 at 04:00:32PM +0100, Florian Weimer wrote:
> On 02/23/2015 12:42 PM, Florian Weimer wrote:
> > Robin Hack discovered that Samba would enter an infinite loop when
> > processing quota-related requests.  It turns out this is a bug in the
> > nss_files database.  Performing a lookup in the middle of an iteration
> > (say, getwuid between getpwent) effectively resets the file pointer, so
> > that the iteration starts again from the beginning.
> > 
> > Tested on x86_64-redhat-linux-gnu.  Okay to commit?
> 
> Ping?
> 
> Can we at least fix the most common instance of this bug?

I agree.  Patch looks good to me.

Siddhesh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20150325/df460dd8/attachment.sig>