[PATCH] Harden put*ent functions against data injection [BZ #18724]

[Florian Weimer]

On 07/27/2015 09:59 PM, Carlos O'Donell wrote:
> On 07/27/2015 11:18 AM, Florian Weimer wrote:
>> This patch addresses a “Bobby Tables” issue in the put*ent functions and
>> the getent program, similar to one of the recent libuser issues.
>>
>> I believe this is just hardening because users of the put*ent functions
>> already have appropriate checks before they call these functions, so
>> this is definitely post-freeze material.
>>
>> Tested on x86_64-redhat-linux-gnu.  Okay to commit after master reopens?
> 
> Looks good to me for 2.23 with testsuite comment nits fixed.

Thanks, I committed this with the changes suggested in this thread.

Florian