c/mirror_zfs
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_zfs.git synced 2026-05-23 02:44:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

splat cred:groupmember: Fix false positives

Browse Source 
Due to certain assumptions made in the the cred:groupmember test it
could result in false positives when run on specific distributions.
This was solely a bug in the test case and not in the groupmember()
function which the test case was validating.

To prevent future false positives the test case has been rewritten
to be both more rigerous and to make fewer assumptions about the
system.

Minor style cleanup was done to cr_groups_search() and groupmember()
functions.

Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
This commit is contained in:
Brian Behlendorf
2014-04-07 14:31:21 -07:00
parent 668d2a0da5
commit e19101e08f
2 changed files with 80 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module/spl/spl-cred.c
+8 -5
View File
@@ -44,7 +44,8 @@ cr_groups_search(const struct group_info *group_info, kgid_t grp)
cr_groups_search(const struct group_info *group_info, gid_t grp)
#endif
{
unsigned int left, right;
unsigned int left, right, mid;
int cmp;
if (!group_info)
return 0;
@@ -52,8 +53,10 @@ cr_groups_search(const struct group_info *group_info, gid_t grp)
left = 0;
right = group_info->ngroups;
while (left < right) {
unsigned int mid = (left+right)/2;
int cmp = KGID_TO_SGID(grp) - KGID_TO_SGID(GROUP_AT(group_info, mid));
mid = (left + right) / 2;
cmp = KGID_TO_SGID(grp) -
KGID_TO_SGID(GROUP_AT(group_info, mid));
if (cmp > 0)
left = mid + 1;
else if (cmp < 0)
@@ -120,7 +123,7 @@ crgetgroups(const cred_t *cr)
return gids;
}
/* Check if the passed gid is available is in supplied credential. */
/* Check if the passed gid is available in supplied credential. */
int
groupmember(gid_t gid, const cred_t *cr)
{
@@ -128,7 +131,7 @@ groupmember(gid_t gid, const cred_t *cr)
int rc;
gi = get_group_info(cr->group_info);
rc = cr_groups_search(cr->group_info, SGID_TO_KGID(gid));
rc = cr_groups_search(gi, SGID_TO_KGID(gid));
put_group_info(gi);
return rc;