191094Sdes/*- 2115619Sdes * Copyright (c) 2002-2003 Networks Associates Technology, Inc. 3228690Sdes * Copyright (c) 2004-2011 Dag-Erling Sm��rgrav 491094Sdes * All rights reserved. 591094Sdes * 691094Sdes * This software was developed for the FreeBSD Project by ThinkSec AS and 799158Sdes * Network Associates Laboratories, the Security Research Division of 899158Sdes * Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 999158Sdes * ("CBOSS"), as part of the DARPA CHATS research program. 1091094Sdes * 1191094Sdes * Redistribution and use in source and binary forms, with or without 1291094Sdes * modification, are permitted provided that the following conditions 1391094Sdes * are met: 1491094Sdes * 1. Redistributions of source code must retain the above copyright 1591094Sdes * notice, this list of conditions and the following disclaimer. 1691094Sdes * 2. Redistributions in binary form must reproduce the above copyright 1791094Sdes * notice, this list of conditions and the following disclaimer in the 1891094Sdes * documentation and/or other materials provided with the distribution. 1991094Sdes * 3. The name of the author may not be used to endorse or promote 2091094Sdes * products derived from this software without specific prior written 2191094Sdes * permission. 2291094Sdes * 2391094Sdes * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 2491094Sdes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 2591094Sdes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2691094Sdes * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 2791094Sdes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2891094Sdes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2991094Sdes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 3091094Sdes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 3191094Sdes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 3291094Sdes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 3391094Sdes * SUCH DAMAGE. 3491094Sdes * 35255376Sdes * $Id: pam_end.c 648 2013-03-05 17:54:27Z des $ 3691094Sdes */ 3791094Sdes 38228690Sdes#ifdef HAVE_CONFIG_H 39228690Sdes# include "config.h" 40228690Sdes#endif 41228690Sdes 4291094Sdes#include <stdlib.h> 4391094Sdes 4491094Sdes#include <security/pam_appl.h> 4591094Sdes 4691094Sdes#include "openpam_impl.h" 4791094Sdes 4891094Sdes/* 4991094Sdes * XSSO 4.2.1 5091094Sdes * XSSO 6 page 42 5191094Sdes * 5291094Sdes * Terminate the PAM transaction 5391094Sdes */ 5491094Sdes 5591094Sdesint 5691094Sdespam_end(pam_handle_t *pamh, 5791094Sdes int status) 5891094Sdes{ 5991094Sdes pam_data_t *dp; 6091094Sdes int i; 6191094Sdes 62107937Sdes ENTER(); 6391094Sdes if (pamh == NULL) 64107937Sdes RETURNC(PAM_SYSTEM_ERR); 6591094Sdes 6691094Sdes /* clear module data */ 6791094Sdes while ((dp = pamh->module_data) != NULL) { 6891094Sdes if (dp->cleanup) 6991094Sdes (dp->cleanup)(pamh, dp->data, status); 7091094Sdes pamh->module_data = dp->next; 71115619Sdes FREE(dp->name); 72115619Sdes FREE(dp); 7391094Sdes } 7491094Sdes 7591094Sdes /* clear environment */ 76116520Sdes while (pamh->env_count) { 77116520Sdes --pamh->env_count; 78116520Sdes FREE(pamh->env[pamh->env_count]); 79116520Sdes } 80115619Sdes FREE(pamh->env); 8191094Sdes 8291094Sdes /* clear chains */ 8395908Sdes openpam_clear_chains(pamh->chains); 8491094Sdes 8591094Sdes /* clear items */ 8691094Sdes for (i = 0; i < PAM_NUM_ITEMS; ++i) 8791094Sdes pam_set_item(pamh, i, NULL); 8891094Sdes 89115619Sdes FREE(pamh); 9091094Sdes 91107937Sdes RETURNC(PAM_SUCCESS); 9291094Sdes} 9391100Sdes 9491100Sdes/* 9591100Sdes * Error codes: 9691100Sdes * 9791100Sdes * PAM_SYSTEM_ERR 9891100Sdes */ 9991100Sdes 10091100Sdes/** 10191100Sdes * The =pam_end function terminates a PAM transaction and destroys the 10291100Sdes * corresponding PAM context, releasing all resources allocated to it. 10391100Sdes * 10491100Sdes * The =status argument should be set to the error code returned by the 10591100Sdes * last API call before the call to =pam_end. 10691100Sdes */ 107