131c9a
diff -ru cronie-1.5.2/src/cronnext.c cronie-1.5.2_patched/src/cronnext.c
131c9a
--- cronie-1.5.2/src/cronnext.c	2018-05-03 18:41:12.000000000 +0200
131c9a
+++ cronie-1.5.2_patched/src/cronnext.c	2018-09-07 15:17:54.555924440 +0200
131c9a
@@ -71,13 +71,13 @@
131c9a
 /*
131c9a
  * print entry flags
131c9a
  */
131c9a
-char *flagname[]= {
131c9a
-	[MIN_STAR] =	"MIN_STAR",
131c9a
-	[HR_STAR] =	"HR_STAR",
131c9a
-	[DOM_STAR] =	"DOM_STAR",
131c9a
-	[DOW_STAR] =	"DOW_STAR",
131c9a
-	[WHEN_REBOOT] =	"WHEN_REBOOT",
131c9a
-	[DONT_LOG] =	"DONT_LOG"
131c9a
+const char *flagname[]= {
131c9a
+	"MIN_STAR",
131c9a
+	"HR_STAR",
131c9a
+	"DOM_STAR",
131c9a
+	"DOW_STAR",
131c9a
+	"WHEN_REBOOT",
131c9a
+	"DONT_LOG"
131c9a
 };
131c9a
 
131c9a
 void printflags(char *indent, int flags) {
131c9a
@@ -85,8 +85,8 @@
131c9a
 	int first = 1;
131c9a
 
131c9a
 	printf("%s    flagnames:", indent);
131c9a
-	for (f = 1; f < sizeof(flagname);  f = f << 1)
131c9a
-		if (flags & f) {
131c9a
+	for (f = 0; f < sizeof(flagname)/sizeof(char *);  f++)
131c9a
+		if (flags & (int)1 << f) {
131c9a
 			printf("%s%s", first ? " " : "|", flagname[f]);
131c9a
 			first = 0;
131c9a
 		}
131c9a
diff -ru cronie-1.5.2/src/do_command.c cronie-1.5.2_patched/src/do_command.c
131c9a
--- cronie-1.5.2/src/do_command.c	2017-09-14 13:53:21.000000000 +0200
131c9a
+++ cronie-1.5.2_patched/src/do_command.c	2018-09-07 15:17:54.555924440 +0200
131c9a
@@ -418,7 +418,7 @@
131c9a
 			if (mailto && safe_p(usernm, mailto)
131c9a
 				&& strncmp(MailCmd,"off",3) && !SyslogOutput) {
131c9a
 				char **env;
131c9a
-				char mailcmd[MAX_COMMAND];
131c9a
+				char mailcmd[MAX_COMMAND+1]; /* +1 for terminator */
131c9a
 				char hostname[MAXHOSTNAMELEN];
131c9a
 				char *content_type = env_get("CONTENT_TYPE", jobenv),
131c9a
 					*content_transfer_encoding =
131c9a
@@ -434,7 +434,7 @@
131c9a
 					}
131c9a
 				}
131c9a
 				else {
131c9a
-					strncpy(mailcmd, MailCmd, MAX_COMMAND);
131c9a
+					strncpy(mailcmd, MailCmd, MAX_COMMAND+1);
131c9a
 				}
131c9a
 				if (!(mail = cron_popen(mailcmd, "w", e->pwd, jobenv))) {
131c9a
 					perror(mailcmd);
131c9a
diff -ru cronie-1.5.2/src/env.c cronie-1.5.2_patched/src/env.c
131c9a
--- cronie-1.5.2/src/env.c	2017-09-14 13:53:21.000000000 +0200
131c9a
+++ cronie-1.5.2_patched/src/env.c	2018-09-07 15:17:54.554924435 +0200
131c9a
@@ -63,7 +63,7 @@
131c9a
 		for (i = 0; i < count; i++)
131c9a
 			if ((p[i] = strdup(envp[i])) == NULL) {
131c9a
 				save_errno = errno;
131c9a
-				while (--i >= 0)
131c9a
+				while (i-- > 0)
131c9a
 					free(p[i]);
131c9a
 				free(p);
131c9a
 				errno = save_errno;
131c9a
@@ -263,7 +263,9 @@
131c9a
 	}
131c9a
 	if (state != FINI && state != EQ2 && !(state == VALUE && !quotechar)) {
131c9a
 		Debug(DPARS, ("load_env, not an env var, state = %d\n", state));
131c9a
-			fseek(f, filepos, 0);
131c9a
+			if (fseek(f, filepos, 0)) {
131c9a
+                return ERR;
131c9a
+           }
131c9a
 		Set_LineNum(fileline);
131c9a
 		return (FALSE);
131c9a
 	}
131c9a
diff -ru cronie-1.5.2/src/globals.h cronie-1.5.2_patched/src/globals.h
131c9a
--- cronie-1.5.2/src/globals.h	2017-01-17 16:53:50.000000000 +0100
131c9a
+++ cronie-1.5.2_patched/src/globals.h	2018-09-07 15:17:54.555924440 +0200
131c9a
@@ -77,7 +77,7 @@
131c9a
 XTRN time_t	StartTime;
131c9a
 XTRN int	NoFork;
131c9a
 XTRN int        PermitAnyCrontab;
131c9a
-XTRN char       MailCmd[MAX_COMMAND];
131c9a
+XTRN char       MailCmd[MAX_COMMAND+1]; /* +1 for terminator */
131c9a
 XTRN char       cron_default_mail_charset[MAX_ENVSTR];
131c9a
 XTRN int        EnableClustering;
131c9a
 XTRN int	ChangePath;
131c9a
diff -ru cronie-1.5.2/src/security.c cronie-1.5.2_patched/src/security.c
131c9a
--- cronie-1.5.2/src/security.c	2017-09-14 13:29:47.000000000 +0200
131c9a
+++ cronie-1.5.2_patched/src/security.c	2018-09-07 15:17:54.554924435 +0200
131c9a
@@ -417,7 +417,7 @@
131c9a
 		}
131c9a
 	}
131c9a
 
131c9a
-	if (strcmp(u->scontext, ucontext)) {
131c9a
+	if (!ucontext || strcmp(u->scontext, ucontext)) {
131c9a
 		if (!cron_authorize_range(u->scontext, ucontext)) {
131c9a
 			if (security_getenforce() > 0) {
131c9a
 # ifdef WITH_AUDIT
131c9a
diff -ru cronie-1.5.2/src/user.c cronie-1.5.2_patched/src/user.c
131c9a
--- cronie-1.5.2/src/user.c	2017-01-17 16:53:50.000000000 +0100
131c9a
+++ cronie-1.5.2_patched/src/user.c	2018-09-07 15:17:54.555924440 +0200
131c9a
@@ -44,6 +44,10 @@
131c9a
 free_user (user * u) {
131c9a
 	entry *e, *ne;
131c9a
 
131c9a
+	if (!u) {
131c9a
+		return;
131c9a
+	}
131c9a
+
131c9a
 	free(u->name);
131c9a
 	free(u->tabname);
131c9a
 	for (e = u->crontab; e != NULL; e = ne)	{