[Midnightbsd-cvs] [MidnightBSD/src] f8dfbb: id: harden numeric parsing and group list allocation

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: f8dfbb4362b681e4b54994bab5b5dd475211f0f4
      https://github.com/MidnightBSD/src/commit/f8dfbb4362b681e4b54994bab5b5dd475211f0f4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-05-01 (Fri, 01 May 2026)

  Changed paths:
    M usr.bin/id/id.c

  Log Message:
  -----------
  id: harden numeric parsing and group list allocation

Add overflow checks when allocating group lists, clamp _SC_NGROUPS_MAX, and validate numeric uid arguments before getpwuid().

AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications