path: root/src/passwd/getspnam_r.c
diff options
authorRich Felker <>2015-01-21 14:26:05 -0500
committerRich Felker <>2015-01-21 14:26:05 -0500
commitecb608192a48d3688e1a0a21027bfd968d3301a1 (patch)
treec56eed67b272ceece3e6787e8bdba1f6aca7df04 /src/passwd/getspnam_r.c
parent63cac4e29a61487423f63bed9150aa9aec906823 (diff)
fix erroneous return of partial username matches by getspnam[_r]
when using /etc/shadow (rather than tcb) as its backend, getspnam_r matched any username starting with the caller-provided string rather than requiring an exact match. in practice this seems to have affected only systems where one valid username is a prefix for another valid username, and where the longer username appears first in the shadow file.
Diffstat (limited to 'src/passwd/getspnam_r.c')
1 files changed, 1 insertions, 1 deletions
diff --git a/src/passwd/getspnam_r.c b/src/passwd/getspnam_r.c
index 15f8c87b..92339528 100644
--- a/src/passwd/getspnam_r.c
+++ b/src/passwd/getspnam_r.c
@@ -98,7 +98,7 @@ int getspnam_r(const char *name, struct spwd *sp, char *buf, size_t size, struct
pthread_cleanup_push(cleanup, f);
while (fgets(buf, size, f) && (k=strlen(buf))>0) {
- if (skip || strncmp(name, buf, l)) {
+ if (skip || strncmp(name, buf, l) || buf[l]!=':') {
skip = buf[k-1] != '\n';