Mailing List Archive

[Bug 7862] New: - suexec never log a group name.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7862>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7862

suexec never log a group name.

Summary: suexec never log a group name.
Product: Apache httpd-2.0
Version: HEAD
Platform: All
OS/Version: All
Status: NEW
Severity: Major
Priority: Other
Component: All
AssignedTo: bugs@httpd.apache.org
ReportedBy: y-koga@apache.or.jp


suexec never log a group name.
I think the following patch works fine:

Index: support/suexec.c
===================================================================
RCS file: /Apache/CVS/httpd-2.0-cvs/support/suexec.c,v
retrieving revision 1.19
diff -u -r1.19 suexec.c
--- support/suexec.c 13 Mar 2002 20:48:06 -0000 1.19
+++ support/suexec.c 9 Apr 2002 11:16:02 -0000
@@ -399,7 +399,11 @@
}
else {
gid = atoi(target_gname);
- actual_gname = strdup(target_gname);
+ if ((gr = getgrgid(gid)) == NULL) {
+ log_err("invalid target group name: (%s)\n", target_gname);
+ exit(106);
+ }
+ actual_gname = strdup(gr->gr_name);
}

#ifdef _OSD_POSIX

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org