mirror of
https://sourceware.org/git/glibc.git
synced 2024-12-22 10:50:07 +00:00
676599b36a
This prevents injection of ':' and '\n' into output functions which use the NSS files database syntax. Critical fields (user/group names and file system paths) are checked strictly. For backwards compatibility, the GECOS field is rewritten instead. The getent program is adjusted to use the put*ent functions in libc, instead of local copies. This changes the behavior of getent if user names start with '-' or '+'. |
||
---|---|---|
.. | ||
fgetspent_r.c | ||
fgetspent.c | ||
getspent_r.c | ||
getspent.c | ||
getspnam_r.c | ||
getspnam.c | ||
lckpwdf.c | ||
Makefile | ||
putspent.c | ||
sgetspent_r.c | ||
sgetspent.c | ||
shadow.h | ||
tst-putspent.c | ||
tst-shadow.c | ||
Versions |