Blame SOURCES/0104-nss-idmap-do-not-set-a-limit.patch

086f82
From 814108dc02a4de5d0333e9c2713f809fc3d2da47 Mon Sep 17 00:00:00 2001
086f82
From: Sumit Bose <sbose@redhat.com>
086f82
Date: Wed, 18 Apr 2018 10:20:06 +0200
086f82
Subject: [PATCH] nss-idmap: do not set a limit
086f82
086f82
If the limit is set the needed size to return all groups cannot be
086f82
returned.
086f82
086f82
Related to https://pagure.io/SSSD/sssd/issue/3715
086f82
086f82
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
086f82
(cherry picked from commit 46a4c265629d9b725c41f22849741ce7342bdd85)
086f82
086f82
DOWNSTREAM:
086f82
Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]
086f82
---
086f82
 src/sss_client/idmap/sss_nss_ex.c | 4 +++-
086f82
 1 file changed, 3 insertions(+), 1 deletion(-)
086f82
086f82
diff --git a/src/sss_client/idmap/sss_nss_ex.c b/src/sss_client/idmap/sss_nss_ex.c
086f82
index af6a95180656b598bcb94c209dfa821cb0275f02..f56bffcc24a7e2503e23a892541a9242ed4b5069 100644
086f82
--- a/src/sss_client/idmap/sss_nss_ex.c
086f82
+++ b/src/sss_client/idmap/sss_nss_ex.c
086f82
@@ -96,7 +96,9 @@ errno_t sss_nss_mc_get(struct nss_input *inp)
086f82
                                          inp->result.initgrrep.start,
086f82
                                          inp->result.initgrrep.ngroups,
086f82
                                          &(inp->result.initgrrep.groups),
086f82
-                                         *(inp->result.initgrrep.ngroups));
086f82
+                                         /* no limit so that needed size can
086f82
+                                          * be returned properly */
086f82
+                                         -1);
086f82
         break;
086f82
     default:
086f82
         return EINVAL;
086f82
-- 
086f82
2.14.3
086f82