[Pkg-xfce-commits] r8140 - in /goodies/trunk/lightdm-gtk-greeter/debian: changelog patches/07_fix-NULL-username.patch patches/series

[Yves-Alexis Perez]

Author: corsac
Date: Tue Jan  7 13:21:32 2014
New Revision: 8140

URL: http://svn.debian.org/wsvn/pkg-xfce/?sc=1&rev=8140
Log:
* debian/patches:
  - 07_fix-NULL-username addef, fix crash when last username is empty. This
    is CVE-2014-XXXX.                                         closes: #734472
* 

Added:
    goodies/trunk/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch
Modified:
    goodies/trunk/lightdm-gtk-greeter/debian/changelog
    goodies/trunk/lightdm-gtk-greeter/debian/patches/series

Modified: goodies/trunk/lightdm-gtk-greeter/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/trunk/lightdm-gtk-greeter/debian/changelog?rev=8140&op=diff
==============================================================================
--- goodies/trunk/lightdm-gtk-greeter/debian/changelog	(original)
+++ goodies/trunk/lightdm-gtk-greeter/debian/changelog	Tue Jan  7 13:21:32 2014
@@ -1,3 +1,12 @@
+lightdm-gtk-greeter (1.6.1-5) UNRELEASED; urgency=high
+
+  * debian/patches:
+    - 07_fix-NULL-username addef, fix crash when last username is empty. This
+      is CVE-2014-XXXX.                                         closes: #734472
+  * 
+
+ -- Yves-Alexis Perez <corsac at debian.org>  Tue, 07 Jan 2014 14:03:39 +0100
+
 lightdm-gtk-greeter (1.6.1-4) unstable; urgency=low
 
   * debian/control:

Added: goodies/trunk/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/trunk/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch?rev=8140&op=file
==============================================================================
--- goodies/trunk/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch	(added)
+++ goodies/trunk/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch	Tue Jan  7 13:21:32 2014
@@ -0,0 +1,18 @@
+--- a/src/lightdm-gtk-greeter.c
++++ b/src/lightdm-gtk-greeter.c
+@@ -599,13 +599,13 @@ start_authentication (const gchar *usern
+     }
+     g_free (data);
+ 
+-    if (strcmp (username, "*other") == 0)
++    if (g_strcmp0 (username, "*other") == 0)
+     {
+         gtk_widget_show (GTK_WIDGET (username_entry));
+         gtk_widget_show (GTK_WIDGET (cancel_button));
+         lightdm_greeter_authenticate (greeter, NULL);
+     }
+-    else if (strcmp (username, "*guest") == 0)
++    else if (g_strcmp0 (username, "*guest") == 0)
+     {
+         lightdm_greeter_authenticate_as_guest (greeter);
+     }

Modified: goodies/trunk/lightdm-gtk-greeter/debian/patches/series
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/trunk/lightdm-gtk-greeter/debian/patches/series?rev=8140&op=diff
==============================================================================
--- goodies/trunk/lightdm-gtk-greeter/debian/patches/series	(original)
+++ goodies/trunk/lightdm-gtk-greeter/debian/patches/series	Tue Jan  7 13:21:32 2014
@@ -1,3 +1,4 @@
 04_default-gtk-greeter-config.patch
 05_add-enter-shortcut-switch-login-password-fields.patch
 06_support-session-select-before-authentication.patch
+07_fix-NULL-username.patch