Tickets :: Comment on [#4505] Missing error checks on fgets and fputs in poppassd.php driver

* Your Email Address
* Spam protection	Enter the letters below: . ..___. . __ .__ \|__\|[__ \| \|/ `[__) \| \|[___\|__\|\__.\|
Comment	> The poppassd driver is missing some error checks on the fgets and > fputs commands. > > I'm running poppassd from inetd (on Debian 3.1) and am restricting > access to it with hosts.allow and hosts.deny > > > > If you block access to poppassd completely (e.g., "poppassd: ALL" in > /etc/hosts.deny), then Passwd will report succes, even though the > change failed. This is because it can connect to the service (i.e., > open a socket), but not use it. The 200 welcome code is also not sent > to the client. > > So, after sending the user command, the service returns nothing. The > poppassd.php code does not check this however. > > > > I have created a small patch that fixes this, which I'll attach to > this bugreport. > > > > regards, > > Leander > > > >
Attachment
Watch this ticket