package/busybox/patches/310-passwd_access.patch

   1
   2         Copyright (C) 2006 OpenWrt.org
   3
   4 diff -urN busybox.old/networking/httpd.c busybox.dev/networking/httpd.c
   5 --- busybox.old/networking/httpd.c      2004-10-08 10:03:29.000000000 +0200
   6 +++ busybox.dev/networking/httpd.c      2006-02-04 01:54:19.688016250 +0100
   7 @@ -1467,12 +1467,26 @@
   8                 {
   9                         char *cipher;
  10                         char *pp;
  11 +                       char *ppnew = NULL;
  12 +                       struct passwd *pwd = NULL;
  13
  14                         if(strncmp(p, request, u-request) != 0) {
  15                                 /* user uncompared */
  16                                 continue;
  17                         }
  18                         pp = strchr(p, ':');
  19 +                       if(pp && pp[1] == '$' && pp[2] == 'p' &&
  20 +                                                pp[3] == '$' && pp[4] &&
  21 +                                                (pwd = getpwnam(&pp[4])) != NULL) {
  22 +                               if(pwd->pw_passwd && pwd->pw_passwd[0] == '!') {
  23 +                                       prev = NULL;
  24 +                                       continue;
  25 +                               }
  26 +                               ppnew = malloc(5 + strlen(pwd->pw_passwd));
  27 +                               ppnew[0] = ':';
  28 +                               strcpy(ppnew + 1, pwd->pw_passwd);
  29 +                               pp = ppnew;
  30 +                       }
  31                         if(pp && pp[1] == '$' && pp[2] == '1' &&
  32                                                  pp[3] == '$' && pp[4]) {
  33                                 pp++;
  34 @@ -1482,6 +1492,10 @@
  35                                 /* unauthorized */
  36                                 continue;
  37                         }
  38 +                       if (ppnew) {
  39 +                               free(ppnew);
  40 +                               ppnew = NULL;
  41 +                       }
  42                 }
  43  #endif
  44                 if (strcmp(p, request) == 0) {