From 793e817d491b5081d2a156b546ae06f28d11a737 Mon Sep 17 00:00:00 2001
From: Darren Tucker <dtucker@zip.com.au>
Date: Tue, 8 Jul 2003 21:01:04 +1000
Subject:  - (dtucker) Check return value of setpcred().

---
 ChangeLog | 3 ++-
 session.c | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index ea4d4ac20..58b188eb3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,7 @@
  - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]]
    Include AIX headers for authentication functions and make calls match
    prototypes.  Test for and handle 3-args and 4-arg variants of loginfailed.
+ - (dtucker) Check return value of setpcred().
 
 20030707
  - (dtucker) [configure.ac] Bug #600: Check that getrusage is declared before
@@ -667,4 +668,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.2847 2003/07/08 10:52:12 dtucker Exp $
+$Id: ChangeLog,v 1.2848 2003/07/08 11:01:04 dtucker Exp $
diff --git a/session.c b/session.c
index ac57c3d0f..e9cf7e959 100644
--- a/session.c
+++ b/session.c
@@ -1215,7 +1215,8 @@ do_setusercontext(struct passwd *pw)
 	{
 
 #ifdef HAVE_SETPCRED
-		setpcred(pw->pw_name, (char **)NULL);
+		if (setpcred(pw->pw_name, (char **)NULL) == -1)
+			fatal("Failed to set process credentials");
 #endif /* HAVE_SETPCRED */
 #ifdef HAVE_LOGIN_CAP
 # ifdef __bsdi__
-- 
cgit v1.2.3