Blame SOURCES/0104-nss-idmap-do-not-set-a-limit.patch

ab1ddb
From 814108dc02a4de5d0333e9c2713f809fc3d2da47 Mon Sep 17 00:00:00 2001
ab1ddb
From: Sumit Bose <sbose@redhat.com>
ab1ddb
Date: Wed, 18 Apr 2018 10:20:06 +0200
ab1ddb
Subject: [PATCH] nss-idmap: do not set a limit
ab1ddb
ab1ddb
If the limit is set the needed size to return all groups cannot be
ab1ddb
returned.
ab1ddb
ab1ddb
Related to https://pagure.io/SSSD/sssd/issue/3715
ab1ddb
ab1ddb
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
ab1ddb
(cherry picked from commit 46a4c265629d9b725c41f22849741ce7342bdd85)
ab1ddb
ab1ddb
DOWNSTREAM:
ab1ddb
Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]
ab1ddb
---
ab1ddb
 src/sss_client/idmap/sss_nss_ex.c | 4 +++-
ab1ddb
 1 file changed, 3 insertions(+), 1 deletion(-)
ab1ddb
ab1ddb
diff --git a/src/sss_client/idmap/sss_nss_ex.c b/src/sss_client/idmap/sss_nss_ex.c
ab1ddb
index af6a95180656b598bcb94c209dfa821cb0275f02..f56bffcc24a7e2503e23a892541a9242ed4b5069 100644
ab1ddb
--- a/src/sss_client/idmap/sss_nss_ex.c
ab1ddb
+++ b/src/sss_client/idmap/sss_nss_ex.c
ab1ddb
@@ -96,7 +96,9 @@ errno_t sss_nss_mc_get(struct nss_input *inp)
ab1ddb
                                          inp->result.initgrrep.start,
ab1ddb
                                          inp->result.initgrrep.ngroups,
ab1ddb
                                          &(inp->result.initgrrep.groups),
ab1ddb
-                                         *(inp->result.initgrrep.ngroups));
ab1ddb
+                                         /* no limit so that needed size can
ab1ddb
+                                          * be returned properly */
ab1ddb
+                                         -1);
ab1ddb
         break;
ab1ddb
     default:
ab1ddb
         return EINVAL;
ab1ddb
-- 
ab1ddb
2.14.3
ab1ddb