[Pkg-shadow-devel] Bug#526749: passwd: Infinite loop when reaching 60000 users

[Sylvain Beucler]

Package: passwd
Version: 1:4.1.1-6
Severity: normal

As far as I can see, when looking for the next available user id, useradd does:
- take max user id + 1
- if id > 60000 then start from 1000 and search for gaps
- repeat

So if all user ids from 1000 to 60000 are taken, useradd is in an infinite loop.
Admittedly not a common case, but I guess it needs to return an error in that case.

-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (500, 'stable'), (300, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-vserver-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages passwd depends on:
ii  debianutils               2.30           Miscellaneous utilities specific t
ii  libc6                     2.9-8          GNU C Library: Shared libraries
ii  libpam-modules            1.0.1-5+lenny1 Pluggable Authentication Modules f
ii  libpam0g                  1.0.1-5+lenny1 Pluggable Authentication Modules l
ii  libselinux1               2.0.65-5       SELinux shared libraries

passwd recommends no packages.

passwd suggests no packages.

-- debconf information excluded