action.size can be used without previously being assigned to inpam_xauth.c

[Shlomi Fish <shlomif vipe technion ac il>]

In pam_xauth.c:

The function do_file makes use of an action struct. One of the things it
does is trunacate its length to action.size and then mmap it. However, the
function mangle_refcount calls it without necessarily assigning a.size to
something.

This causes su to generate a very large file under
~/.xauth/refcount/root/localhost.localdomain/unix\:0 and then it dies with
a "Bus Error" signal.

Please let me know when a fix is available.

Regards,

	Shlomi Fish


 --


----------------------------------------------------------------------
Shlomi Fish        shlomif@vipe.technion.ac.il
Home Page:         http://t2.technion.ac.il/~shlomif/
Home E-mail:       shlomif@techie.com

He who re-invents the wheel, understands much better how a wheel works.