[cups.bugs] [HIGH] STR #2692: "DefaultAuthType" in cupsd.conf is set "1" by admin cgi-bin
Osamu Mihara
mihara.osamu at fxpsc.co.jp
Tue Jan 29 09:37:24 PST 2008
DO NOT REPLY TO THIS MESSAGE. INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.
[STR New]
OS: NetBSD 4.0/amd64
GCC: 4.1.2
(1) Open https://localhost:631/admin/
(2) Change anything in Basic Server Settings
(3) Press "Change Settings"
This operation updates cupsd.conf, but cupsd terminates because
"DefaultAuthType" is set "1" (invalid - should be "Basic").
In cgi-bin/admin.c (7092), default_auth_type is rewritten to "1" from
"Basic" after the line below (around line 1395).
num_settings = cupsAddOption(CUPS_SERVER_REMOTE_ADMIN,
remote_admin, num_settings, &settings);
It looks like misuse of pointer, or something.
Link: http://www.cups.org/str.php?L2692
Version: 1.3.5
More information about the cups
mailing list