mirror of
https://github.com/termux-pacman/termux-packages.git
synced 2026-02-10 20:00:51 +00:00
8a80fabd9e
It contain some bug fixes and 1 CVE fix. dropbear: Update sysoptions.h.patch dropbear: Update svr-chansession.c.patch dropbear: Update svr-auth.c.patch Update common-session.c.patch dropbear: try to fix path by updating patch dropbear: forgot to remove revision.
44 lines
1.3 KiB
Diff
44 lines
1.3 KiB
Diff
+++ ./src/svr-auth.c
|
|
@@ -95,6 +95,9 @@
|
|
}
|
|
|
|
username = buf_getstring(ses.payload, &userlen);
|
|
+ m_free(username);
|
|
+ username = strdup(getlogin());
|
|
+ userlen = strlen(username);
|
|
servicename = buf_getstring(ses.payload, &servicelen);
|
|
methodname = buf_getstring(ses.payload, &methodlen);
|
|
|
|
@@ -247,11 +250,6 @@
|
|
/* first request */
|
|
fill_passwd(username);
|
|
ses.authstate.username = m_strdup(username);
|
|
- } else {
|
|
- /* check username hasn't changed */
|
|
- if (strcmp(username, ses.authstate.username) != 0) {
|
|
- dropbear_exit("Client trying multiple usernames");
|
|
- }
|
|
}
|
|
|
|
/* avoids cluttering logs with repeated failure messages from
|
|
@@ -311,9 +309,10 @@
|
|
usershell = ses.authstate.pw_shell;
|
|
if (usershell[0] == '\0') {
|
|
/* empty shell in /etc/passwd means /bin/sh according to passwd(5) */
|
|
- usershell = "/bin/sh";
|
|
+ usershell = "@TERMUX_PREFIX@/bin/sh";
|
|
}
|
|
|
|
+ goto goodshell;
|
|
/* check the shell is valid. If /etc/shells doesn't exist, getusershell()
|
|
* should return some standard shells like "/bin/sh" and "/bin/csh" (this
|
|
* is platform-specific) */
|
|
@@ -326,7 +325,6 @@
|
|
}
|
|
}
|
|
/* no matching shell */
|
|
- endusershell();
|
|
TRACE(("no matching shell"))
|
|
ses.authstate.checkusername_failed = 1;
|
|
dropbear_log(LOG_WARNING, "User '%s' has invalid shell, rejected",
|