Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon1.gif   elogd crashes with a URL, posted by Jaime Duran on Wed Jul 22 22:54:59 2015 
    icon2.gif   Re: elogd crashes with a URL, posted by Stefan Ritt on Tue Aug 4 13:18:26 2015 
Message ID: 68064     Entry time: Tue Aug 4 13:18:26 2015     In reply to: 68056
Icon: Reply  Author: Stefan Ritt  Author Email: stefan.ritt@psi.ch 
Category: Bug report  OS: Linux  ELOG Version: 3.1.0-2 
Subject: Re: elogd crashes with a URL 

I could not reproduce your problem. I can only fix it if I can reproduce it, so let's agree on a common test base. May I ask you to do the following:

  • Download the most recent elog version from bitbucket and compile it
  • Create two new logbooks "demo1" and "demo2" with minimal configuration, but using yor global password file which differs from the group ones
  • Send me step-by-step instructions how to trigger the problem, including your elogd.cfg file and your password files (of course with fake accounts)

If I can reproduce the crash, I can fix it.

Jaime Duran wrote:

URL causes elogd to crash when a global password file name doesn't match any group's password file name. 

The offending URL is copied from the address field of the browser after sorting a logbook by on of the fileds.

After login out and using the copied URL, elogd shows the authentication dialog and then crashes after the credentials are submited.

Some debugging point me to a NULL pointer on the following instruction in line   25502  of elogd.c :

  if (lbs->pwd_xml_tree) {

The work around was to name the global password file as the password file of one of the groups.

 

ELOG V3.1.5-3fb85fa6