191094Sdes/*-
2115619Sdes * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3228690Sdes * Copyright (c) 2004-2011 Dag-Erling Sm��rgrav
491094Sdes * All rights reserved.
591094Sdes *
691094Sdes * This software was developed for the FreeBSD Project by ThinkSec AS and
799158Sdes * Network Associates Laboratories, the Security Research Division of
899158Sdes * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
999158Sdes * ("CBOSS"), as part of the DARPA CHATS research program.
1091094Sdes *
1191094Sdes * Redistribution and use in source and binary forms, with or without
1291094Sdes * modification, are permitted provided that the following conditions
1391094Sdes * are met:
1491094Sdes * 1. Redistributions of source code must retain the above copyright
1591094Sdes *    notice, this list of conditions and the following disclaimer.
1691094Sdes * 2. Redistributions in binary form must reproduce the above copyright
1791094Sdes *    notice, this list of conditions and the following disclaimer in the
1891094Sdes *    documentation and/or other materials provided with the distribution.
1991094Sdes * 3. The name of the author may not be used to endorse or promote
2091094Sdes *    products derived from this software without specific prior written
2191094Sdes *    permission.
2291094Sdes *
2391094Sdes * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
2491094Sdes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
2591094Sdes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2691094Sdes * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
2791094Sdes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2891094Sdes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2991094Sdes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
3091094Sdes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
3191094Sdes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
3291094Sdes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
3391094Sdes * SUCH DAMAGE.
3491094Sdes *
35255376Sdes * $Id: pam_end.c 648 2013-03-05 17:54:27Z des $
3691094Sdes */
3791094Sdes
38228690Sdes#ifdef HAVE_CONFIG_H
39228690Sdes# include "config.h"
40228690Sdes#endif
41228690Sdes
4291094Sdes#include <stdlib.h>
4391094Sdes
4491094Sdes#include <security/pam_appl.h>
4591094Sdes
4691094Sdes#include "openpam_impl.h"
4791094Sdes
4891094Sdes/*
4991094Sdes * XSSO 4.2.1
5091094Sdes * XSSO 6 page 42
5191094Sdes *
5291094Sdes * Terminate the PAM transaction
5391094Sdes */
5491094Sdes
5591094Sdesint
5691094Sdespam_end(pam_handle_t *pamh,
5791094Sdes	int status)
5891094Sdes{
5991094Sdes	pam_data_t *dp;
6091094Sdes	int i;
6191094Sdes
62107937Sdes	ENTER();
6391094Sdes	if (pamh == NULL)
64107937Sdes		RETURNC(PAM_SYSTEM_ERR);
6591094Sdes
6691094Sdes	/* clear module data */
6791094Sdes	while ((dp = pamh->module_data) != NULL) {
6891094Sdes		if (dp->cleanup)
6991094Sdes			(dp->cleanup)(pamh, dp->data, status);
7091094Sdes		pamh->module_data = dp->next;
71115619Sdes		FREE(dp->name);
72115619Sdes		FREE(dp);
7391094Sdes	}
7491094Sdes
7591094Sdes	/* clear environment */
76116520Sdes	while (pamh->env_count) {
77116520Sdes		--pamh->env_count;
78116520Sdes		FREE(pamh->env[pamh->env_count]);
79116520Sdes	}
80115619Sdes	FREE(pamh->env);
8191094Sdes
8291094Sdes	/* clear chains */
8395908Sdes	openpam_clear_chains(pamh->chains);
8491094Sdes
8591094Sdes	/* clear items */
8691094Sdes	for (i = 0; i < PAM_NUM_ITEMS; ++i)
8791094Sdes		pam_set_item(pamh, i, NULL);
8891094Sdes
89115619Sdes	FREE(pamh);
9091094Sdes
91107937Sdes	RETURNC(PAM_SUCCESS);
9291094Sdes}
9391100Sdes
9491100Sdes/*
9591100Sdes * Error codes:
9691100Sdes *
9791100Sdes *	PAM_SYSTEM_ERR
9891100Sdes */
9991100Sdes
10091100Sdes/**
10191100Sdes * The =pam_end function terminates a PAM transaction and destroys the
10291100Sdes * corresponding PAM context, releasing all resources allocated to it.
10391100Sdes *
10491100Sdes * The =status argument should be set to the error code returned by the
10591100Sdes * last API call before the call to =pam_end.
10691100Sdes */
107