Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon1.gif   elogd crashes with a URL, posted by Jaime Duran on Wed Jul 22 22:54:59 2015 
    icon2.gif   Re: elogd crashes with a URL, posted by Stefan Ritt on Tue Aug 4 13:18:26 2015 
Message ID: 68056     Entry time: Wed Jul 22 22:54:59 2015     Reply to this: 68064
Icon: Entry  Author: Jaime Duran  Author Email: jduran@yorku.ca 
Category: Bug report  OS: Linux  ELOG Version: 3.1.0-2 
Subject: elogd crashes with a URL 

URL causes elogd to crash when a global password file name doesn't match any group's password file name. 

The offending URL is copied from the address field of the browser after sorting a logbook by on of the fileds.

After login out and using the copied URL, elogd shows the authentication dialog and then crashes after the credentials are submited.

Some debugging point me to a NULL pointer on the following instruction in line   25502  of elogd.c :

  if (lbs->pwd_xml_tree) {

The work around was to name the global password file as the password file of one of the groups.

ELOG V3.1.5-3fb85fa6