* src/gpasswd.c: Remove log_gpasswd_success_gshadow(). Writing in

[shadow] / src / su.c

diff --git a/src/su.c b/src/su.c
index 03ad6348929e0c4cb32d17f0e8edb1e64342bbb2..c1914d32ff9f76b2e73514a5d523c6a79988e078 100644 (file)
--- a/src/su.c
+++ b/src/su.c
@@ -82,19 +82,19 @@
  * Global variables
  */
 const char *Prog;
-static const char *caller_tty = NULL;  /* Name of tty SU is run from */
+static /*@observer@*/const char *caller_tty = NULL;    /* Name of tty SU is run from */
 static bool caller_is_root = false;
 static uid_t caller_uid;
 #ifndef USE_PAM
-static int caller_on_console = 0;
+static bool caller_on_console = false;
 #ifdef SU_ACCESS
-static char *caller_pass;
+static /*@only@*/char *caller_pass;
 #endif
 #endif                         /* !USE_PAM */
 static bool doshell = false;
 static bool fakelogin = false;
-static char *shellstr = NULL;
-static char *command = NULL;
+static /*@observer@*/const char *shellstr;
+static /*@null@*/char *command = NULL;
 
 
 /* not needed by sulog.c anymore */
@@ -132,11 +132,11 @@ static bool iswheel (const char *);
 #endif                         /* !USE_PAM */
 static bool restricted_shell (const char *shellname);
 static /*@noreturn@*/void su_failure (const char *tty, bool su_to_root);
-static struct passwd * check_perms (void);
+static /*@only@*/struct passwd * check_perms (void);
 #ifdef USE_PAM
-static void check_perms_pam (struct passwd *pw);
+static void check_perms_pam (const struct passwd *pw);
 #else                          /* !USE_PAM */
-static void check_perms_nopam (struct passwd *pw);
+static void check_perms_nopam (const struct passwd *pw);
 #endif                         /* !USE_PAM */
 static void save_caller_context (char **argv);
 static void process_flags (int argc, char **argv);
@@ -194,7 +194,7 @@ static RETSIGTYPE kill_child (int unused(s))
 /* borrowed from GNU sh-utils' "su.c" */
 static bool restricted_shell (const char *shellname)
 {
-       char *line;
+       /*@observer@*/const char *line;
 
        setusershell ();
        while ((line = getusershell ()) != NULL) {
@@ -402,6 +402,7 @@ static void prepare_pam_close_session (void)
  */
 static void usage (int status)
 {
+       (void)
        fputs (_("Usage: su [options] [LOGIN]\n"
                 "\n"
                 "Options:\n"
@@ -417,7 +418,7 @@ static void usage (int status)
 }
 
 #ifdef USE_PAM
-static void check_perms_pam (struct passwd *pw)
+static void check_perms_pam (const struct passwd *pw)
 {
        int ret;
        ret = pam_authenticate (pamh, 0);
@@ -458,9 +459,10 @@ static void check_perms_pam (struct passwd *pw)
        }
 }
 #else                          /* !USE_PAM */
-static void check_perms_nopam (struct passwd *pw)
+static void check_perms_nopam (const struct passwd *pw)
 {
-       struct spwd *spwd = NULL;
+       /*@observer@*/const struct spwd *spwd = NULL;
+       /*@observer@*/const char *password = pw->pw_passwd;
        RETSIGTYPE (*oldsig) (int);
 
        if (caller_is_root) {
@@ -497,7 +499,7 @@ static void check_perms_nopam (struct passwd *pw)
 #ifdef SU_ACCESS
        if (strcmp (pw->pw_passwd, SHADOW_PASSWD_STRING) == 0) {
                if (NULL != spwd) {
-                       pw->pw_passwd = spwd->sp_pwdp;
+                       password = spwd->sp_pwdp;
                }
        }
 
@@ -505,11 +507,11 @@ static void check_perms_nopam (struct passwd *pw)
        case 0: /* normal su, require target user's password */
                break;
        case 1: /* require no password */
-               pw->pw_passwd = "";     /* XXX warning: const */
+               password = "";  /* XXX warning: const */
                break;
        case 2: /* require own password */
-               puts (_("(Enter your own password)"));
-               pw->pw_passwd = caller_pass;
+               (void) puts (_("(Enter your own password)"));
+               password = caller_pass;
                break;
        default:        /* access denied (-1) or unexpected value */
                fprintf (stderr,
@@ -529,7 +531,7 @@ static void check_perms_nopam (struct passwd *pw)
         * The first character of an administrator defined method is an '@'
         * character.
         */
-       if (pw_auth (pw->pw_passwd, name, PW_SU, (char *) 0) != 0) {
+       if (pw_auth (password, name, PW_SU, (char *) 0) != 0) {
                SYSLOG (((pw->pw_uid != 0)? LOG_NOTICE : LOG_WARN,
                         "Authentication failed for %s", name));
                fprintf(stderr, _("%s: Authentication failure\n"), Prog);
@@ -570,7 +572,7 @@ static void check_perms_nopam (struct passwd *pw)
  *     In case of subsystem login, the user is first authenticated in the
  *     caller's root subsystem, and then in the user's target subsystem.
  */
-static struct passwd * check_perms (void)
+static /*@only@*/struct passwd * check_perms (void)
 {
 #ifdef USE_PAM
        const char *tmp_name;
@@ -635,6 +637,7 @@ static struct passwd * check_perms (void)
                subsystem (pw); /* change to the subsystem root */
                endpwent ();            /* close the old password databases */
                endspent ();
+               pw_free (pw);
                return check_perms ();  /* authenticate in the subsystem */
        }
 
@@ -651,7 +654,8 @@ static struct passwd * check_perms (void)
  */
 static void save_caller_context (char **argv)
 {
-       struct passwd *pw = NULL;
+       const struct passwd *pw = NULL;
+       const char *password = NULL;
        /*
         * Get the program name. The program name is used as a prefix to
         * most error messages.
@@ -704,15 +708,18 @@ static void save_caller_context (char **argv)
         * Sort out the password of user calling su, in case needed later
         * -- chris
         */
+       password = pw->pw_passwd;
        if (strcmp (pw->pw_passwd, SHADOW_PASSWD_STRING) == 0) {
-               struct spwd *spwd = getspnam (caller_name);
+               const struct spwd *spwd = getspnam (caller_name);
                if (NULL != spwd) {
-                       pw->pw_passwd = spwd->sp_pwdp;
+                       password = spwd->sp_pwdp;
                }
        }
-       caller_pass = xstrdup (pw->pw_passwd);
+       free (caller_pass);
+       caller_pass = xstrdup (password);
 #endif                         /* SU_ACCESS */
 #endif                         /* !USE_PAM */
+       pw_free (pw);
 }
 
 /*
@@ -906,7 +913,10 @@ static void set_environment (struct passwd *pw)
 
        if (change_environment) {
                if (fakelogin) {
-                       pw->pw_shell = shellstr;
+                       if (shellstr != pw->pw_shell) {
+                               free (pw->pw_shell);
+                               pw->pw_shell = xstrdup (shellstr);
+                       }
                        setup_env (pw);
                } else {
                        addenv ("HOME", pw->pw_dir);
@@ -996,7 +1006,7 @@ int main (int argc, char **argv)
         * in /etc/passwd.
         */
        if (NULL == shellstr) {
-               shellstr = (char *) strdup (pw->pw_shell);
+               shellstr = pw->pw_shell;
        }
 
        /*
@@ -1151,6 +1161,8 @@ int main (int argc, char **argv)
                (void) shell (shellstr, cp, environ);
        }
 
+       pw_free (pw);
+
        return (errno == ENOENT ? E_CMD_NOTFOUND : E_CMD_NOEXEC);
 }