cyradm segfault when authorization fails

[Derrick J Brashear]

On Thu, 4 Nov 2004, Patrick Gibson wrote:

> Here's the backtrace for when cyradm segfaults after I've entered the wrong 
> password.
>
> #0  0x28325431 in _sasl_canon_user () from /usr/local/lib/libsasl2.so.2
> #1  0x28483a46 in crammd5_client_mech_step () from 
> /usr/local/lib/sasl2/libcrammd5.so
> #2  0x28327cd1 in sasl_client_step () from /usr/local/lib/libsasl2.so.2
> #3  0x2824d387 in imclient_authenticate_sub ()

That looks familiar.

Try this patch for sasl
diff -u -r1.83 -r1.84
--- cram.c      15 Dec 2003 20:04:22 -0000      1.83
+++ cram.c      6 Aug 2004 20:29:44 -0000       1.84
@@ -507,7 +507,7 @@
                                     sasl_out_params_t *oparams)
  {
      client_context_t *text = (client_context_t *) conn_context;
-    const char *authid;
+    const char *authid = NULL;
      sasl_secret_t *password = NULL;
      unsigned int free_password = 0; /* set if we need to free password */
      int auth_result = SASL_OK;

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html