Files
systemd/src/nss-systemd
Milan Kyselica aa85a742fe nss-systemd: fix off-by-one in nss_pack_group_record_shadow()
nss_count_strv() counts trailing NULL pointers in n. The pointer area
then used (n + 1), reserving one slot more than the size check
accounted for.

Drop the + 1 since n already includes the trailing NULLs, unlike the
non-shadow nss_pack_group_record() where n does not.

Fixes: https://github.com/systemd/systemd/issues/41591
2026-04-12 21:20:15 +01:00
..