Blame SOURCES/sudo-1.8.23-ldapsearchuidfix.patch

e33993
diff -up sudo-1.8.23/plugins/sudoers/ldap.c.ldapsearchuidfix sudo-1.8.23/plugins/sudoers/ldap.c
e33993
--- sudo-1.8.23/plugins/sudoers/ldap.c.ldapsearchuidfix	2018-04-29 21:59:31.000000000 +0200
e33993
+++ sudo-1.8.23/plugins/sudoers/ldap.c	2018-06-18 08:34:01.202686941 +0200
e33993
@@ -1189,8 +1189,8 @@ sudo_ldap_build_pass1(LDAP *ld, struct p
e33993
     if (ldap_conf.search_filter)
e33993
 	sz += strlen(ldap_conf.search_filter);
e33993
 
e33993
-    /* Then add (|(sudoUser=USERNAME)(sudoUser=ALL)) + NUL */
e33993
-    sz += 29 + sudo_ldap_value_len(pw->pw_name);
e33993
+    /* Then add (|(sudoUser=USERNAME)(sudoUser=#uid)(sudoUser=ALL)) + NUL */
e33993
+    sz += 29 + (12 + MAX_UID_T_LEN) + sudo_ldap_value_len(pw->pw_name);
e33993
 
e33993
     /* Add space for primary and supplementary groups and gids */
e33993
     if ((grp = sudo_getgrgid(pw->pw_gid)) != NULL) {
e33993
@@ -1253,6 +1253,12 @@ sudo_ldap_build_pass1(LDAP *ld, struct p
e33993
     CHECK_LDAP_VCAT(buf, pw->pw_name, sz);
e33993
     CHECK_STRLCAT(buf, ")", sz);
e33993
 
e33993
+    /* Append user uid */
e33993
+    (void) snprintf(gidbuf, sizeof(gidbuf), "%u", (unsigned int)pw->pw_uid);
e33993
+    (void) strlcat(buf, "(sudoUser=#", sz);
e33993
+    (void) strlcat(buf, gidbuf, sz);
e33993
+    (void) strlcat(buf, ")", sz);
e33993
+
e33993
     /* Append primary group and gid */
e33993
     if (grp != NULL) {
e33993
 	CHECK_STRLCAT(buf, "(sudoUser=%", sz);