diff options
| -rw-r--r-- | winsup/cygwin/ChangeLog | 5 | ||||
| -rw-r--r-- | winsup/cygwin/release/2.3.0 | 3 | ||||
| -rw-r--r-- | winsup/cygwin/sec_helper.cc | 5 |
3 files changed, 12 insertions, 1 deletions
diff --git a/winsup/cygwin/ChangeLog b/winsup/cygwin/ChangeLog index d3a47a4..0c7c5a9 100644 --- a/winsup/cygwin/ChangeLog +++ b/winsup/cygwin/ChangeLog @@ -1,5 +1,10 @@ 2015-10-22 Corinna Vinschen <corinna@vinschen.de> + * sec_helper.cc (cygsid::get_sid): Don't reject SIDs with missing + subauthorities. + +2015-10-22 Corinna Vinschen <corinna@vinschen.de> + * strfuncs.cc (sys_cp_wcstombs): Always return number of multibytes without trailing NUL as the documentation implies. Throughout Cygwin, fix usage to align to this pattern. diff --git a/winsup/cygwin/release/2.3.0 b/winsup/cygwin/release/2.3.0 index 99ef120..e3abb20 100644 --- a/winsup/cygwin/release/2.3.0 +++ b/winsup/cygwin/release/2.3.0 @@ -46,3 +46,6 @@ Bug Fixes - Fix memory leak in calls to pthread_getattr_np. - Fix output of /proc/<PID>/winexename. + +- Avoid SEGV when handling SIDs with 0 subauthorities. + Addresses: https://cygwin.com/ml/cygwin/2015-10/msg00141.html diff --git a/winsup/cygwin/sec_helper.cc b/winsup/cygwin/sec_helper.cc index 551face..af3307e 100644 --- a/winsup/cygwin/sec_helper.cc +++ b/winsup/cygwin/sec_helper.cc @@ -220,7 +220,10 @@ cygsid::get_sid (DWORD s, DWORD cnt, DWORD *r, bool well_known) SID_IDENTIFIER_AUTHORITY sid_auth = { SECURITY_NULL_SID_AUTHORITY }; # define SECURITY_NT_AUTH 5 - if (s > 255 || cnt < 1 || cnt > SID_MAX_SUB_AUTHORITIES) + /* 2015-10-22: Note that we let slip SIDs with a subauthority count of 0. + There are systems, which generate the SID S-1-0 as group ownership SID, + see https://cygwin.com/ml/cygwin/2015-10/msg00141.html. */ + if (s > 255 || cnt > SID_MAX_SUB_AUTHORITIES) { psid = NO_SID; return NULL; |