critical impact:

cuserid - maximum length of username is different (CrCh189)

Problem description

The cuserid function generates a character string representing the real or effective username of the owner of the current process.

Tru64 UNIX supports usernames up to 12 bytes in length (including the terminating null character) by default, but it can be extended to support usernames of up to 64 bytes. Currently, HP-UX supports usernames up to 9 bytes; however, expanded usernames will be available as a configuration option in a future release of HP-UX.

Identifiers

cuserid

See also

• Background information on unclassified impacts
• cuserid(3)

Solution description

Change any usernames with a length of more than 9 bytes (including terminating NULL character) to less than or equal to 9 bytes (including terminating NULL character).

Because cuserid is scheduled to be withdrawn from a future version of the X/Open CAE specifications and is subject to withdrawal from future releases of HP-UX, we recommend that references to cuserid be replaced by equivalent calls to getpwuid or getlogin, depending on which username you want.

See also

• getlogin(3C)
• getpwuid(3C)
• cuserid(3S)

Problem summary