]> granicus.if.org Git - sudo/commit
The fix for bug #843 was incomplete and caused pam_end() to be called early.
authorTodd C. Miller <Todd.Miller@sudo.ws>
Fri, 7 Dec 2018 16:51:34 +0000 (09:51 -0700)
committerTodd C. Miller <Todd.Miller@sudo.ws>
Fri, 7 Dec 2018 16:51:34 +0000 (09:51 -0700)
commit4125808a8579a23fbcf5e2cd37507746d34ef1ba
tree6b41e770eeff757423f22fdf1537afcd1c1ce426
parente91e5ee820355e96826323bc1f021dff04c7e4b6
The fix for bug #843 was incomplete and caused pam_end() to be called early.
sudo_pam_approval() must not set the global pam status to an error
value if it returns AUTH_SUCCESS.  Otherwise, sudo_pam_cleanup()
will call pam_end() before sudo_pam_begin_session().  This resulted
in a NULL PAM handle being used in sudo_pam_begin_session().
plugins/sudoers/auth/pam.c