SSSD / sssd

#3794 sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

The cert_to_ssh_key request uses a destructor to close the pipes towards the p11_child. But because the structure that owns the destructor is allocated on the request state, the destructor is only called once.

This is a problem if there are multiple certificates as all the pipes for the certificates before the last are leaked.

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1610667

Metadata Update from @jhrozek:
- Issue assigned to lslebodn
- Issue tagged with: bug, regression
  • master: a76f96ac143128c11bdb975293d667aca861cd91

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1610667, https://bugzilla.redhat.com/show_bug.cgi?id=1609382 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1610667)

Issue linked to Bugzilla: Bug 1609382

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4790

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata

bug regression

None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1610667, https://bugzilla.redhat.com/show_bug.cgi?id=1609382
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.