#258 mod_auth_pam: 2 severe bugs (memleak / looping)

[Anonymous]

hi,

using mod_auth_pam for apache 2.0 on Solaris, we
found 2 bugs.

1.) module allocates memory but never releases mem.

2.) empty Auth String will lead to an endless loop.

using apache in an worker model (threaded) optimized
for high load, apache will allocate 4 GB mem on a
solaris machine with a short time, then the apache child
crashes.

Fix: Check for empty auth strings
Fix: release allocated memory.

Rainer Scherg (rasc)