Florian Weimer 676599b36a Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724]
This prevents injection of ':' and '\n' into output functions which
use the NSS files database syntax.  Critical fields (user/group names
and file system paths) are checked strictly.  For backwards
compatibility, the GECOS field is rewritten instead.

The getent program is adjusted to use the put*ent functions in libc,
instead of local copies.  This changes the behavior of getent if user
names start with '-' or '+'.
2015-10-02 11:34:13 +02:00
..
2015-06-18 23:08:15 +00:00
2012-01-07 23:57:22 -05:00
2015-02-24 13:29:40 -05:00
2012-05-24 23:08:18 +02:00
2014-11-24 15:03:45 +05:30
2013-09-04 20:47:21 +00:00
2012-11-21 06:33:19 -08:00
2014-11-24 15:03:45 +05:30
2012-01-07 23:57:22 -05:00
2014-10-30 19:44:31 +00:00
2015-09-15 20:36:50 +00:00
2014-11-24 11:41:44 +05:30
2012-05-24 23:08:18 +02:00
2012-05-31 13:10:02 +02:00
2015-06-12 10:10:18 +00:00
2014-11-24 15:03:45 +05:30
2012-01-07 23:57:22 -05:00
2015-02-23 11:35:24 -03:00
2015-07-09 15:32:32 -07:00
2014-11-24 15:03:45 +05:30
2015-06-17 20:21:19 +00:00
2015-07-09 15:25:47 -07:00
2012-01-07 23:57:22 -05:00