Hi,

In the current stable version (0.79-5), the bug still exits, but I think in
the testing version (0.99.7) it doesn't (I'm not completely sure).

Anyway, it should be reviewed. Look at _unix_read_password function in
/modules/pam_unix/support.c:

...
if (resp[0] != NULL && resp[replies-1] != NULL) {
   /* interpret the response */
   if (retval == PAM_SUCCESS) {    /* a good conversation */

      token = resp[0];
      if (token != NULL) {   // ALWAYS TRUE !!
...

Reply via email to