Sudo Project commits | Ecosyste.ms: OpenCollective

Add CODEOWNERS file, currently all owned by @millert.

github.com/sudo-project/sudo - 95a6731ff19638dcb4cdd10c257be4057efd5501 authored about 2 years ago

Only regenerate ChangeLog if there have been changes.

Also check that "hg --version" or "git --version" works before using
hg or git. Bug #1043.

github.com/sudo-project/sudo - 179fd324727763d07b65c8fd4e081168db6f7142 authored about 2 years ago

Fix potential crash introduced in the fix for GitHub issue #134.

If a user's sudoers entry did not have any RunAs user's set, running
"sudo -U otheruser -l" would...

github.com/sudo-project/sudo - f5488d733d0010dfc3231560e00e5e65a7ad9c03 authored about 2 years ago

Defer installing the SIGCHLD handler until after non-job commands run.

Lock the socket dir to avoid races in open_persistent_connection().
Also avoid using "ssh -f" sin...

github.com/sudo-project/sudo - 31684dccc06fdea35ac7d1d9ed223ce67b0fc8a1 authored about 2 years ago

Fix a typo in SUDO_CHECK_NET_FUNC.

github.com/sudo-project/sudo - 2e322c094375f2761b9bf97448611dc2d43fb0b6 authored about 2 years ago

Fix -Wsign-compare warning.

github.com/sudo-project/sudo - 185fe31fea41a557facf0c6eea33151658058f3e authored about 2 years ago

Initialize "found" in SUDO_CHECK_NET_FUNC.

github.com/sudo-project/sudo - 104a0294e10f75274d022de3db0e30deb08a2038 authored about 2 years ago

Fix pasto introduced in last commit.

github.com/sudo-project/sudo - 11264cd49b236e827730f7905c6ba92257c9a464 authored about 2 years ago

Fix failure in check targets when there is no UTF-8 C locale.

github.com/sudo-project/sudo - 3df7b64d8093b7f46d04940a3562363fbb3cce4a authored about 2 years ago

Add SUDO_CHECK_NET_FUNC to check functions in the network libraries.

If a function is not found, check again with "-lsocket", "-linet",
"-lsocket -lnsl", or "-lresolv...

github.com/sudo-project/sudo - 3d2082cdf3f83a1b647c99dbc1f1bf1d3fbf28dc authored about 2 years ago

Make sure HAVE_MAILLOCK_H is defined on Solaris 10.

github.com/sudo-project/sudo - f9639aca89ce8d914968bb62fe3c3edc55e171ec authored about 2 years ago

Remove extraneous "(cached)" line when the -C option is used.

We do not need to call AC_CACHE_VAL() to ensure that a variable is
cached, its name just needs to...

github.com/sudo-project/sudo - 2c97e7f471073c6cef70c3dcbd1fdd34754cc18f authored about 2 years ago

Make path checks in sudo.m4 cachable.

github.com/sudo-project/sudo - 3cdd044c68ef2da2ebb9d88dcf89c8d77197c3ea authored about 2 years ago

Use AC_PATH_PROGS_FEATURE_CHECK to find mandoc/nroff.

We don't use the NROFFPROG or MANDOCPROG any longer so no need
to set those.

github.com/sudo-project/sudo - 1b76f76122d9800afb7145f019fe8ee643cdfd0e authored about 2 years ago

Don't check for _sys_siglist if sys_siglist is found.

github.com/sudo-project/sudo - dd1eb1f6c5e2ffb6792b03b99087033dfaa7a689 authored about 2 years ago

Fix check for sys_sigabbrev.

github.com/sudo-project/sudo - fd6484917e98d1d21718e77e7445c729f1a4bf54 authored about 2 years ago

Skip test for __func__ on C99 and above, avoid extra _sys_signame test.

github.com/sudo-project/sudo - 29c36a3c1d071e1d37bf3c0f4c9d15d7fef3eaf7 authored about 2 years ago

Move gettext checks to m4/gettext.m4

github.com/sudo-project/sudo - 38ffd03cd6e0f4d466d468100ad39010b8a30025 authored about 2 years ago

Move LDAP library checks to m4/ldap.m4 and make more tests cacheable.

github.com/sudo-project/sudo - 12da6bd0cefca7166c8d13d10956641348e839f5 authored about 2 years ago

Move OpenSSL/wolfSSL checks to m4/openssl.m4

github.com/sudo-project/sudo - 00e22508a76313302c60956df1f087b8ed34c901 authored about 2 years ago

Move PIE executable checks to m4/pie.m4

github.com/sudo-project/sudo - f515c238bcf8627a2b2c7548a43fc02e00c4eedf authored about 2 years ago

Move address sanitizer and fuzzer checks to m4/sanitizer.m4

github.com/sudo-project/sudo - 4220e6631b3e780d3e8b8237b48d5c529164f0e1 authored about 2 years ago

Move symbol visibility checks to m4/visibility.m4

github.com/sudo-project/sudo - ea5668086c6ef0180baffd8e1ac61088e6eed964 authored about 2 years ago

Move hardening checks to m4/hardening.m4

github.com/sudo-project/sudo - 5bf5a4e26c57a1386e9d0b7c93181ee193e470b5 authored about 2 years ago

Make cpp variadic arguments check into a macro and move to sudo.m4.

Also move the PVS-Studio.cfg generation to sudo.m4.

github.com/sudo-project/sudo - 8718fc2083cda5dd7adfcebe8436222bc52dd9af authored about 2 years ago

Sync with OpenBSD.

github.com/sudo-project/sudo - ee6420ad5b90f7a9b0c0f229961f2f7a54caefa5 authored about 2 years ago

Merge pull request #218 from sohomdatta1/snprintf

[snprintf] Check for '\0' to prevent undef memory read

github.com/sudo-project/sudo - 31152ba4d75f30969ce9d5d21770b3617f5669d3 authored about 2 years ago

[snprintf] Check for '\0' to prevent undef memory read

github.com/sudo-project/sudo - 8ac89f8d058355565a5481950940444bfd7c44ec authored about 2 years ago

Place C23 attributes before keywords in function declarations.

In practice this means we must use "sudo_noreturn static foo(void)"
instead of "static sudo_noret...

github.com/sudo-project/sudo - e707ffe58b3ccfe5c72f54c38eac1d7069d5021e authored about 2 years ago

Convert from using IPC::Open3 to IPC::Run.

Run tests in a pty so check_ttyname works as expected.
Explicitly set short command line options ...

github.com/sudo-project/sudo - a44a005f0b467cd9b6e4c85a4340c81d05ae8408 authored about 2 years ago

Use C23 [[__fallthrough__]] and [[__noreturn__]] attributes if supported.

If the C23 attributes are not supported, use gcc-style attributes
where possible.

github.com/sudo-project/sudo - 16ae61dcd7d3cd8bf6eb10a22fa742d4505da4e9 authored about 2 years ago

Move the check for the fallthrough attribute outside the warnings block.

Use AX_APPEND_FLAG instead of addind to CFLAGS directly.

github.com/sudo-project/sudo - cfdcd96b63e9e6c2e21e1114566315f1f95ca987 authored about 2 years ago

The distributed package build script I use to build all sudo packages.

This is not included in the release tarball because it is of limited
use to other people.

github.com/sudo-project/sudo - 63e58cbbec9415a82643c8c4c9d8d8bac81f4851 authored about 2 years ago

Pass the list of files to include in the tarball on stdin.

This avoids any limit on the size of argv.

github.com/sudo-project/sudo - a9cab46f8871a410538aa8209a8cebbc1c1a792a authored about 2 years ago

Merge pull request #214 from BornThisWay/1124_repeated_invocation

check_syntax(): Remove duplicate calls to init_defaults()

github.com/sudo-project/sudo - 9a36698164eb4929c6c880bc4415b36cff8e39bb authored about 2 years ago

check_syntax(): Remove duplicate calls to init_defaults()

github.com/sudo-project/sudo - 26cf125fb9a6aceb8012451b9ed53bd4c8f22027 authored about 2 years ago

build_command_info: free command_info on failure.

Once upon a time, command_info was a stack variable, now it is
dynamically allocated. Coverity C...

github.com/sudo-project/sudo - 46d286947ec996e153b4ac39ce4d7f1edb9ca706 authored about 2 years ago

Better handling of out-of-memory conditions.

github.com/sudo-project/sudo - eb4ae10ab4d7d311aeec25008961d3b2ff3736f6 authored about 2 years ago

Keep group file open until the call to myendgrent().

This restores the previous behavior.

github.com/sudo-project/sudo - 9fff5a5fae09c295315e109cf84f85886fcac2a9 authored about 2 years ago

Eliminate a few harmless dead stores.

Quiets warnings from Infer.

github.com/sudo-project/sudo - f066ff9e01e88b814681248932eea45d88a3056c authored about 2 years ago

sudo_ldap_parse_option: add explicit NULL check for strchr().

This should not be needed since we only use the returned pointer
if it is larger than the string ...

github.com/sudo-project/sudo - 2f97da316e931da4513efa7ee7efbf64d1c090b1 authored about 2 years ago

journal_fdopen: free journal_path and close journal before setting

Fixes a potential resource leak that currently cannot happen.
Quiets a warning from Infer.

github.com/sudo-project/sudo - a0d9963fe6b6709219fd67e87620f93732d54ab5 authored about 2 years ago

sudo_ldap_result_add_entry: check sudo_ldap_get_values_len() return value.

Previously, we just compared the error code with LDAP_NO_MEMORY
when checking for sudoOrder since...

github.com/sudo-project/sudo - a37ecb2666c3f5bdb4cc0cb3d751c50c1067a10d authored about 2 years ago

Refactor code to open passwd/group file and add setpassent/setgroupent.

This makes the "stayopen" semantics match the system passwd/group
functions. The getpwent/getgre...

github.com/sudo-project/sudo - 1c9c7bd34ab4fc2062104cf0318d4dfecf8d1196 authored about 2 years ago

gram.h: #line directives should reference gram.h not y.tab.h.

github.com/sudo-project/sudo - 4d7823e51837a0206ce6420c703e13925c36d735 authored about 2 years ago

Use clang, not /usr/bin/cc on FreeBSD and macOS.

While /usr/bin/cc _is_ clang on those platforms, some static analyzers
get confused if we don't r...

github.com/sudo-project/sudo - 7ac13204f230debd9543c11d29401f3b3b1ad193 authored about 2 years ago

Merge pull request #212 from BornThisWay/1122_null_deref

sudo_rcstr_dup: Fix potential NULL pointer deref

github.com/sudo-project/sudo - da7a5ecabd359fd65a79566851423ea6accad9f6 authored about 2 years ago

sudo_rcstr_dup: Fix potential NULL pointer deref

github.com/sudo-project/sudo - dbfd84301a9316018f7c5e42ff5b3a19dd13e5c5 authored about 2 years ago

Add a reminder to the default lecture that the password will not echo.

This line is only displayed when the pwfeedback option is disabled.
GitHub issue #195.

github.com/sudo-project/sudo - 3396267291328eccfcbc7bfb1729c77f30216513 authored about 2 years ago

Merge pull request #210 from BornThisWay/1121_typo

Fix some typos

github.com/sudo-project/sudo - c3f138eaa23021cb75fb1632b4311a3e302a124e authored about 2 years ago

Fix some typos

github.com/sudo-project/sudo - cbdc4883d1e1d4c9e725d5b66d0ab55796b8e759 authored about 2 years ago

Merge pull request #208 from BornThisWay/1121_return

intercept_read: Print and then return.

github.com/sudo-project/sudo - 6a5546b11f0ec8a277af8563f3b98d9c75b0625c authored about 2 years ago

intercept_read: Print and then return.

github.com/sudo-project/sudo - b1af59aa56c05a1b57c5729075c86adf28ca230c authored about 2 years ago

Merge pull request #205 from BornThisWay/1119_access_null_pointer

sudo_mmap_strdup_v1: Fix potential NULL pointer deref

github.com/sudo-project/sudo - 496ae6e6f0308004eaf690c9e78f314830f702c2 authored about 2 years ago

sudo_mmap_strdup_v1: Fix potential NULL pointer deref

github.com/sudo-project/sudo - 1eabf13577bfb2c440eb93851173fe01ed9d0ba9 authored about 2 years ago

copy_vector: plug memory leak in error path

Only the array was being freed, not the contents.
GitHub issue #202.

github.com/sudo-project/sudo - 9c694e9a658787f58fdbe1c81e6ed6387a6ce9b4 authored about 2 years ago

Better matching of macOS version to SDK path.

github.com/sudo-project/sudo - 981cc2f8e399ff13b364577abb9ce6488e089dd8 authored about 2 years ago

Merge pull request #200 from BornThisWay/fix_mem_leak_converse

Fix memory leak of pass in converse().

github.com/sudo-project/sudo - ad220d72d425f5f13f9c299289d7edd2ad58ce78 authored about 2 years ago

sudo_passwd_cleanup: Set auth->data to NULL after freeing.

GitHub issue #201

github.com/sudo-project/sudo - b3834bbf248f3376ada8fc44166cba38c8ad4bcf authored about 2 years ago

Fix memory leak of pass in converse().

github.com/sudo-project/sudo - f5cae905ca1a9f686f80aea45a34cea50fec0534 authored about 2 years ago

Use AC_SYS_YEAR2038 instead of setting _TIME_BITS by hand.

github.com/sudo-project/sudo - 00448939619d549637e6642d5d6b1fe45804cb30 authored about 2 years ago

Update macros from autoconf-archive.

github.com/sudo-project/sudo - 4af5e6293c5e9b353266839f99dab450fa2a63c7 authored about 2 years ago

Fix typo; excerise -> exercise

github.com/sudo-project/sudo - fe8e1f3d383a887b97bf840cc26fd120c76da1ca authored about 2 years ago

Regenerate with the autoconf 2.72a pre-release.

github.com/sudo-project/sudo - 920d384941e1bb4ec291c6c154fa7b01f770c1e1 authored about 2 years ago

Fix insufficient quoting in AC_CHECK_LIB() calls.

github.com/sudo-project/sudo - cc0615059f647514543d8a45c4deb1a8ba6f970e authored about 2 years ago

If AUTOCONF_VERSION is unset, use version 2.71 not 2.69.

github.com/sudo-project/sudo - 096eacb21c5cd3f789f69d77e0ee68987c63b41c authored about 2 years ago

Replace `foo` in descriptions with 'foo'

github.com/sudo-project/sudo - 03559d0770880db955832c337303605faefd6002 authored about 2 years ago

Add -Wvla and -Walloca to --enable-warnings

github.com/sudo-project/sudo - bef72f76f64eccc2d8681e08b0305d77b878aa60 authored about 2 years ago

sudo_debug_group_list: short-circuit if groups is NULL

github.com/sudo-project/sudo - 3ecfa025b8a1090a4a5328c1b0cf349b92fafca2 authored about 2 years ago

configure: only check for getauxval() if getentropy() is missing.

github.com/sudo-project/sudo - 3cfba230c53eb3e28289f9b7a8ffc3f20abc1d24 authored about 2 years ago

Remove checks for random() and lrand48(), they are no longer used.

Also remove duplicate checks for arc4random() and getentropy().

github.com/sudo-project/sudo - 28dbad334235d0d3c087716cdc139914546bb721 authored about 2 years ago

Skip check for cpp variadic macro support if the compiler supports C99.

github.com/sudo-project/sudo - 3d0fcc0ff271839f937c7f67809535aa29fabfba authored about 2 years ago

HI-UX/MPP is based on OSF-1, not HP-UX

Completely untested.

github.com/sudo-project/sudo - 6b005e811406499393c55fd2f3dc0d9e8c21a457 authored about 2 years ago

Only check for utmps.h on HP-UX.

github.com/sudo-project/sudo - a142bc1830a099cf29bcb95aa0ac46691f897b7d authored about 2 years ago

Only check for sys/syscall.h on Linux.

We only use it in the Linux-specific getentropy() emulation code.

github.com/sudo-project/sudo - a3684d7f3b2d7e665c5cde24318746ac604ad644 authored about 2 years ago

configure: avoid running unnecessary tests on modern systems.

Remove AC_SYS_POSIX_TERMIOS, AC_TYPE_MODE_T, AC_TYPE_UID_T.
Add missing checks for int16_t, uint1...

github.com/sudo-project/sudo - feba299f22c240d27f9311bc9495d50bd306b3e2 authored about 2 years ago

Add a regress check for the cvtsudoers filter crash.

GitHub issue #198.

github.com/sudo-project/sudo - b8e9fc1b123a646d58b20cd38aa1d932b4297f8f authored about 2 years ago

The name of the C locale w/ UTF-8 support is not always C.UTF-8.

Use a pattern to find it (if present) and use that value instead
of hard-coding C.UTF-8. This wo...

github.com/sudo-project/sudo - 5683fc6f7a743b2ecf1830f80a4e278593335da0 authored about 2 years ago

Fix a potential use-after-free bug with cvtsudoers filtering.

In role_to_sudoers() when merging a privilege to the previous one
where the runas lists are the s...

github.com/sudo-project/sudo - 264326de571e0eff1d8003f882bad4cdf1a9230d authored about 2 years ago

Copy some LDIF test data from the cvtsudoers tests to the seed corpus.

This includes a test to exercise the fix in PR #196.

github.com/sudo-project/sudo - 75008a0570f9dea3c9e5cbcbc319762adb6f9715 authored about 2 years ago

Set LDAP base for sudoers_parse_ldif().

Without this set the fuzzer will not exercise the dn parsing.

github.com/sudo-project/sudo - 455f250ac50e38028a01f9f76ae6655cd70ba419 authored about 2 years ago

Include linux/elf.h, not elf.h to make sure we get NT_ARM_SYSTEM_CALL.

The NT_PRSTATUS define is present in both files.

github.com/sudo-project/sudo - 82150340a6fd7906ddb4dd45350f637b6ec20b13 authored about 2 years ago

Remove CMSG_* compatibility macros, they are no longer used.

github.com/sudo-project/sudo - 3e8497b5cead241e26b8167b693d47fc8111aede authored about 2 years ago

Add missing include of sys/stat.h

github.com/sudo-project/sudo - ecb5526fc8369ba9abc8a186274fdac171887124 authored about 2 years ago

Move forward declaration of struct stat before its first use.

github.com/sudo-project/sudo - 8b06bdc121df9106bf0d4a64b1d939979ee4c030 authored about 2 years ago

Use a consistent base when testing cvtsudoers conversion from ldif.

github.com/sudo-project/sudo - 0b1335f54e22a699cb77d3f93228f0313f093588 authored about 2 years ago

Test parsing LDIF when a backslash is the last char of the file.

If run with address sanitizer, this test will crash when the fix
in ceaf706ab74b is reverted.

github.com/sudo-project/sudo - 8b898b2ca23d68409673bbfc9829b1c60a06f32a authored about 2 years ago

Merge pull request #196 from sohomdatta1/main

Prevent cvtsudoers from reading into undefined memory

github.com/sudo-project/sudo - 685150586d2be00ed133d8f63c147090bb0c8982 authored about 2 years ago

[cvtsudoers]: Prevent sudo from reading into undefined memory

github.com/sudo-project/sudo - 902271f441f61506392588fc26db992e64ae4ecd authored about 2 years ago

sudo_passwd_verify: zero out des_pass before returning.

github.com/sudo-project/sudo - 9f948224acb911cbec1ed9041887c1fe62c59877 authored about 2 years ago

Pass sudo's process ID to suspend_sudo_nopty() since we already know it.

Saves an unnecessary getpid(2) call.

github.com/sudo-project/sudo - 045d08bec92ff2cd2cba7bdfe802f71c4b1efdd1 authored over 2 years ago

Don't kill the parent process group on suspend if it is not sudo's pid.

If sudo is not the process group leader we must only send the suspend
signal to sudo itself. Whe...

github.com/sudo-project/sudo - f87fac3b55022ecb6ee89fd511555996cf74507a authored over 2 years ago

Call terminate_command() with use_pgrp = false when not running in a pty.

When sudo runs a command in the user's existing terminal the command
is run in the same process g...

github.com/sudo-project/sudo - bbe4fbaaae99e56d2434646eab2e46e69655753c authored over 2 years ago

Fix handling of signal forwarding when running commands in a script.

We need to forward signals from a process in the same pgrp if the
pgrp leader is not either sudo ...

github.com/sudo-project/sudo - 36742deec3041413af9b293706a64530321b96b5 authored over 2 years ago

Make test_ptrace compile again after recent changes.

github.com/sudo-project/sudo - c7071f6da016e68fb3147bca7ffc5f06d839d0b6 authored over 2 years ago

Update the cwd for log_subcmds too.

Fixes a problem for intercept_method=trace when running a relative
command from a different direc...

github.com/sudo-project/sudo - 8db1eb0c8bfa025468029294fb9aa805e8c860a6 authored over 2 years ago

sudo 1.9.12p1

github.com/sudo-project/sudo - 3df1e9a07380b66707cd792bbbe6b50d52d018c9 authored over 2 years ago

Include time.h for struct timespec used by sudo_iolog.h.

github.com/sudo-project/sudo - 7ba3184708321387f5420d22ff4ee41112548dff authored over 2 years ago

Display sudo_mode in hex in debug log.

This makes it easier to match against the MODE_ defines.

github.com/sudo-project/sudo - b2c8e1b1b9f582271fc677613299153b6d2fac8c authored over 2 years ago

bsdauth_verify: do not write to prompt, it is now const

github.com/sudo-project/sudo - 7ec1ee0e5cb1864e61051fd62ca2aa45c35013e8 authored over 2 years ago