[cups.bugs] [HIGH] STR #1576: cups_local_auth() will crash for domain sockets

Michael Hofmann mh21 at piware.de
Thu Apr 20 14:41:02 PDT 2006


[STR New]

cups_local_auth() in cups/auth.c will crash for domain sockets. It uses
httpAddrLocalhost(http->hostaddr) to look for localhost. A domain socket
will have http->hostaddr=null, which is not tested in httpAddrLocalhost().

I've only tested this with the KDE cups interface code which uses a direct
copy of this function.

Link: http://www.cups.org/str.php?L1576
Version: 1.2rc2





More information about the cups mailing list