[Pkg-shadow-commits] r1180 - in trunk/debian: . patches

[Nicolas FRANCOIS]

Author: nekral-guest
Date: 2007-04-15 16:07:33 +0000 (Sun, 15 Apr 2007)
New Revision: 1180

Added:
   trunk/debian/patches/408_passwd_check_arguments
Modified:
   trunk/debian/changelog
   trunk/debian/patches/series
Log:
Check the passwd arguments and fail with the usage message if there are
more than one non option arguments (i.e. usernames). Closes: #410268


Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2007-04-15 15:52:41 UTC (rev 1179)
+++ trunk/debian/changelog	2007-04-15 16:07:33 UTC (rev 1180)
@@ -19,6 +19,9 @@
     - Remove unneeded Build-Depends: bzip2, file, texinfo, libpam-runtime
     - /etc/default/useradd: Mentions the creation of primary user groups is
       neither -n nor -g are specified. See also 407_adduser_disable_PUG_with-n
+    - 408_passwd_check_arguments: Check the passwd arguments and fail with the
+      usage message if there are more than one non option arguments (i.e.
+      usernames). Closes: #410268
   * Upstream bugs not yet fixed in upstream releases or CVS:
     - 493_pwck_no_SHADOWPWD: SHADOWPWD no more exist.
       pwck do not detect missing users in /etc/shadow.

Added: trunk/debian/patches/408_passwd_check_arguments
===================================================================
--- trunk/debian/patches/408_passwd_check_arguments	2007-04-15 15:52:41 UTC (rev 1179)
+++ trunk/debian/patches/408_passwd_check_arguments	2007-04-15 16:07:33 UTC (rev 1180)
@@ -0,0 +1,24 @@
+Goal: Check the passwd arguments and fail with the usage message if there
+      are more than one non option arguments (i.e. usernames).
+
+Fixes: #410268
+
+Status wrt upstream: not reported yet.
+
+Index: shadow-4.0.18.1/src/passwd.c
+===================================================================
+--- shadow-4.0.18.1.orig/src/passwd.c	2007-04-15 17:49:31.000000000 +0200
++++ shadow-4.0.18.1/src/passwd.c	2007-04-15 17:52:38.000000000 +0200
+@@ -740,6 +740,12 @@
+ 		name = myname;
+ 
+ 	/*
++	 * Make sure that at most one username was specified.
++	 */
++	if (argc > optind+1)
++		usage (E_USAGE);
++
++	/*
+ 	 * The -a flag requires -S, no other flags, no username, and
+ 	 * you must be root.  --marekm
+ 	 */

Modified: trunk/debian/patches/series
===================================================================
--- trunk/debian/patches/series	2007-04-15 15:52:41 UTC (rev 1179)
+++ trunk/debian/patches/series	2007-04-15 16:07:33 UTC (rev 1180)
@@ -53,3 +53,4 @@
 406_vipw_resume_properly
 497_newgrp_primary_group
 407_adduser_disable_PUG_with-n
+408_passwd_check_arguments