d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pam_login_access: Fix negative entry matching logic

Browse Source 
PR:		252194
Approved by:	so
Security:	CVE-2020-25580
Security:	FreeBSD-SA-21:03.pam_login_access
This commit is contained in:
Mark Johnston 2021-02-23 17:01:29 -05:00
parent 6d67af5f8e
commit 6ab923cbca
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/libpam/modules/pam_login_access/login_access.c
View File

@ -137,10 +137,10 @@ list_match(char *list, const char *item,
if (match != NO) {
while ((tok = strtok((char *) 0, listsep)) && strcmp(tok, "EXCEPT")) {
/* VOID */ ;
if (tok == NULL || list_match((char *) 0, item, match_fn,
login_access_opts) == NO) {
}
if (tok == NULL ||
list_match((char *) 0, item, match_fn, login_access_opts) == NO) {
return (match);
}
}
}
return (NO);