rpms/pam/devel pam-0.99.5.0-access-gai.patch, NONE, 1.1 pam.spec, 1.120, 1.121

[fedora-cvs-commits redhat com]

Author: tmraz

Update of /cvs/dist/rpms/pam/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv28206

Modified Files:
	pam.spec 
Added Files:
	pam-0.99.5.0-access-gai.patch 
Log Message:
* Mon Jul  3 2006 Tomas Mraz <tmraz redhat com> 0.99.5.0-2
- fixed network match in pam_access (patch by Dan Yefimov)


pam-0.99.5.0-access-gai.patch:
 pam_access.c |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)

--- NEW FILE pam-0.99.5.0-access-gai.patch ---
Drop unnecessary AI_ADDRCONF flag. The more that not all systems have support
for it. Also fix loop looking up AF_INET address chain: chain following
expression is relocated to the right place at the end of the loop,
freeaddrinfo() call is relocated to the place right after the end of loop.
--- modules/pam_access/pam_access.c.gai	2006-02-07 10:57:36.000000000 +0300
+++ modules/pam_access/pam_access.c	2006-07-01 21:43:41.000000000 +0400
@@ -535,7 +535,7 @@
       struct addrinfo hint;
 
       memset (&hint, '\0', sizeof (hint));
-      hint.ai_flags = AI_ADDRCONFIG | AI_CANONNAME;
+      hint.ai_flags = AI_CANONNAME;
       hint.ai_family = AF_INET;
 
       if (getaddrinfo (string, NULL, &hint, &res) != 0)
@@ -561,10 +561,10 @@
 		      freeaddrinfo (res);
 		      return YES;
 		    }
-		  runp = runp->ai_next;
 		}
-	      freeaddrinfo (res);
+	      runp = runp->ai_next;
 	    }
+	  freeaddrinfo (res);
 	}
     } else  if (isipaddr(string, NULL, NULL) == YES) {
       /* Assume network/netmask with a IP of a host.  */
@@ -576,7 +576,7 @@
       struct addrinfo hint;
 
       memset (&hint, '\0', sizeof (hint));
-      hint.ai_flags = AI_ADDRCONFIG | AI_CANONNAME;
+      hint.ai_flags = AI_CANONNAME;
       hint.ai_family = AF_UNSPEC;
 
       if (getaddrinfo (string, NULL, &hint, &res) != 0)


Index: pam.spec
===================================================================
RCS file: /cvs/dist/rpms/pam/devel/pam.spec,v
retrieving revision 1.120
retrieving revision 1.121
diff -u -r1.120 -r1.121
--- pam.spec	30 Jun 2006 10:06:09 -0000	1.120
+++ pam.spec	3 Jul 2006 12:45:13 -0000	1.121
@@ -11,7 +11,7 @@
 Summary: A security tool which provides authentication for applications
 Name: pam
 Version: 0.99.5.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPL or BSD
 Group: System Environment/Base
 Source0: ftp.us.kernel.org:/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2
@@ -33,6 +33,7 @@
 Patch81: pam-0.99.3.0-cracklib-try-first-pass.patch
 Patch82: pam-0.99.3.0-tally-fail-close.patch
 Patch83: pam-0.99.4.0-succif-service.patch
+Patch84: pam-0.99.5.0-access-gai.patch
 Patch90: pam-0.99.5.0-namespace-init.patch
 
 BuildRoot: %{_tmppath}/%{name}-root
@@ -94,6 +95,7 @@
 %patch81 -p1 -b .try-first-pass
 %patch82 -p1 -b .fail-close
 %patch83 -p1 -b .service
+%patch84 -p1 -b .gai
 %patch90 -p1 -b .namespace-init
 
 for readme in modules/pam_*/README ; do
@@ -361,6 +363,9 @@
 %{_libdir}/libpam_misc.so
 
 %changelog
+* Mon Jul  3 2006 Tomas Mraz <tmraz redhat com> 0.99.5.0-2
+- fixed network match in pam_access (patch by Dan Yefimov)
+
 * Fri Jun 30 2006 Tomas Mraz <tmraz redhat com> 0.99.5.0-1
 - updated to a new upstream release
 - added service as value to be matched and list matching to