mirror of
https://gitlab.freedesktop.org/libfprint/fprintd.git
synced 2025-12-20 02:20:08 +01:00
619ac0e8d1
... identified through GCC analyzer: ``` Error: GCC_ANALYZER_WARNING (CWE-476): [#def5] fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:768:3: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘data’ /usr/include/security/pam_modules.h:34:5: enter_function: entry to ‘pam_sm_authenticate’ fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:843:6: branch_false: following ‘false’ branch... fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:846:7: branch_false: ...to here fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:846:6: branch_false: following ‘false’ branch... branch_false: ...to here fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:915:10: call_function: calling ‘do_auth’ from ‘pam_sm_authenticate’ 766| 767| data = calloc (1, sizeof (verify_data)); 768|-> data->max_tries = max_tries; 769| data->pamh = pamh; 770| ``` Resolves: https://openscanhub.fedoraproject.org/task/51967/log/fprintd-1.94.5-1.fc43/scan-results.html#def5 Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com> |
||
|---|---|---|
| .. | ||
| fingerprint-strings.h | ||
| meson.build | ||
| pam_fprintd.c | ||
| pam_fprintd.ver | ||
| pam_fprintd_autoptrs.h | ||
| README | ||
PAM module for fingerprint authentication ----------------------------------------- Using: * Modify the appropriate PAM configuration file (/etc/pam.d/system-auth-ac on Fedora systems), and add the line: auth sufficient pam_fprintd.so before the line: auth sufficient pam_unix.so ... * You can now enroll fingerprints using fprintd-enroll. The first available fingerprint available will be used to log you in. Options: * You can add the "debug" option on the pam configuration file line above, this will log more information from PAM to the file specified in your syslog configuration (/var/log/secure by default on Fedora) Known issues: * pam_fprintd does not support identifying the user itself as that would mean having the fingerprint reader on for all the time the user selection is displayed, and could damage the hardware. It could be fixed by having gdm/login only start the PAM conversation when there is activity * pam_fprintd doesn't support entering either the password or a fingerprint, as pam_thinkfinger does, because it's a gross hack, and could be fixed by having the login managers run 2 separate PAM stacks