#2157 sssd_be segfaults if empty grop is resolved using ad_matching_rule
Closed: Fixed Opened by jhrozek.

if the user configures sssd to use ad_matching_rule and there are no group members, the SSSD accesses random data and crashes.


Fields changed

owner: somebody => jhrozek
patch: 0 => 1
status: new => assigned

Pushed to master - 7a8f19affd2a050fd2e9631a54c0e67048d3920c

I'll leave the ticket open for now, it's not yet clear whether we will backport to older branches or not.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1031807 (Red Hat Enterprise Linux 6)

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1031807 1031807]

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11.3

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1033084

rhbz: [https://bugzilla.redhat.com/show_bug.cgi?id=1031807 1031807] => [https://bugzilla.redhat.com/show_bug.cgi?id=1031807 1031807], [https://bugzilla.redhat.com/show_bug.cgi?id=1033084 1033084]

Also pushed to stable branches:

  • sssd-1-11: c55ba1127071f7e6a622d8655d89726128d73981
  • sssd-1-9: 9fcfa6c6e0469b955459f5df7309df28e0f07cf7

Fields changed

resolution: => fixed
status: assigned => closed

Fields changed

changelog: => The sssd_be process would previously segfault if ad_matching_rule was enabled and an empty group was requested.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1079585 (Red Hat Enterprise Linux 6)

rhbz: [https://bugzilla.redhat.com/show_bug.cgi?id=1031807 1031807], [https://bugzilla.redhat.com/show_bug.cgi?id=1033084 1033084] => [https://bugzilla.redhat.com/show_bug.cgi?id=1031807 1031807], [https://bugzilla.redhat.com/show_bug.cgi?id=1033084 1033084], [https://bugzilla.redhat.com/show_bug.cgi?id=1079585 1079585]

Metadata Update from @jhrozek:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.11.3

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3199

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata