[Pkg-xfce-commits] r8142 - in /goodies/branches/experimental/lightdm-gtk-greeter/debian: changelog patches/07_fix-NULL-username.patch patches/series

[Yves-Alexis Perez]

Author: corsac
Date: Tue Jan  7 13:34:40 2014
New Revision: 8142

URL: http://svn.debian.org/wsvn/pkg-xfce/?sc=1&rev=8142
Log:
* debian/patches:
  - 07_fix-NULL-username added, fix crash when last username is empty. This
    is CVE-2014-XXXX.                                         closes: #734472

Added:
    goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch
Modified:
    goodies/branches/experimental/lightdm-gtk-greeter/debian/changelog
    goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/series

Modified: goodies/branches/experimental/lightdm-gtk-greeter/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/branches/experimental/lightdm-gtk-greeter/debian/changelog?rev=8142&op=diff
==============================================================================
--- goodies/branches/experimental/lightdm-gtk-greeter/debian/changelog	(original)
+++ goodies/branches/experimental/lightdm-gtk-greeter/debian/changelog	Tue Jan  7 13:34:40 2014
@@ -1,3 +1,11 @@
+lightdm-gtk-greeter (1.7.0-2) UNRELEASED; urgency=medium
+
+  * debian/patches:
+    - 07_fix-NULL-username added, fix crash when last username is empty. This
+      is CVE-2014-XXXX.                                         closes: #734472
+
+ -- Yves-Alexis Perez <corsac at debian.org>  Tue, 07 Jan 2014 14:26:26 +0100
+
 lightdm-gtk-greeter (1.7.0-1) experimental; urgency=medium
 
   * New upstream development release.

Added: goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch?rev=8142&op=file
==============================================================================
--- goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch	(added)
+++ goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/07_fix-NULL-username.patch	Tue Jan  7 13:34:40 2014
@@ -0,0 +1,18 @@
+--- a/src/lightdm-gtk-greeter.c
++++ b/src/lightdm-gtk-greeter.c
+@@ -627,13 +627,13 @@ start_authentication (const gchar *usern
+     }
+     g_free (data);
+ 
+-    if (strcmp (username, "*other") == 0)
++    if (g_strcmp0 (username, "*other") == 0)
+     {
+         gtk_widget_show (GTK_WIDGET (username_entry));
+         gtk_widget_show (GTK_WIDGET (cancel_button));
+         lightdm_greeter_authenticate (greeter, NULL);
+     }
+-    else if (strcmp (username, "*guest") == 0)
++    else if (g_strcmp0 (username, "*guest") == 0)
+     {
+         lightdm_greeter_authenticate_as_guest (greeter);
+     }

Modified: goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/series
URL: http://svn.debian.org/wsvn/pkg-xfce/goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/series?rev=8142&op=diff
==============================================================================
--- goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/series	(original)
+++ goodies/branches/experimental/lightdm-gtk-greeter/debian/patches/series	Tue Jan  7 13:34:40 2014
@@ -1 +1,2 @@
 04_default-gtk-greeter-config.patch
+07_fix-NULL-username.patch