Re: Security flaw in klock

• Previous message: sylviam: "FW: Possible Security Flaw in Trend Micro's InterScan FTP Proxy"
• Maybe in reply to: Maurizio Paolini: "Security flaw in klock"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

A patch to fix this bug is attached at the end of this mail.

An explanation of the bug:

1. A timer is set to delete the passwd entry dialog after
   a period of inactivity (5secs).
2. When the user hits enter a program is run (kcheckpass) to
   determine whether a valid password was entered.
3. While klock is waiting for kcheckpass to complete it calls
   QApplication::processEvents().

So if the timer is triggered while we are waiting for
kcheckpass to complete, the dialog is deleted.  When
kcheckpass completes, we continue on but the dialog has
been deleted from under us -> crash.

This is easier to replicate if kcheckpass is slow on your
particular machine.  I can replicate this bug very easily
by adding a sleep(2) to kcheckpass.

The fix:

Stop the timer when Enter is pressed, thereby preventing
the dialog from being deleted while kcheckpass is running.

-------------------------------- cut -----------------------
diff -u -r1.13.4.2 saver.cpp
--- saver.cpp   1999/05/28 09:37:28 1.13.4.2
+++ saver.cpp   1999/06/24 10:42:34
@@ -151,6 +151,7 @@
            break;

        case Key_Return:
+            timer.stop();
            waitForAuthentication = true;
            if ( tryPassword() )
                emit passOk();
-------------------------------- cut -----------------------

Martin Jones
mjonesat_private

• Next message: Dave Plonka: "Cabletron Spectrum security vulnerability"
• Previous message: sylviam: "FW: Possible Security Flaw in Trend Micro's InterScan FTP Proxy"
• Maybe in reply to: Maurizio Paolini: "Security flaw in klock"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:50:45 PDT