Submit #2295

error code of crypt-blowfish

Added by logan1 over 2 years ago. Updated over 2 years ago.

Status:ClosedStart date:01/30/2012
Priority:LowDue date:
Assignee:-% Done:

0%

Category:-
Target version:-

Description

According to http://www.openwall.com/lists/oss-security/2011/11/15/3,
On encountering an error, it should return something else than ':'.

Upon discussion with sjg@, we decided to change to NULL. According to
the man page(crypt(3)), upon an error, NULL should be returned.

I tested by changing hash from sha to blf and generating new passwords.

bcrypt2.diff Magnifier (1.33 KB) logan1, 01/30/2012 11:19 AM

History

#1 Updated by sjg over 2 years ago

  • Status changed from New to Closed

Committed to master.

Also available in: Atom PDF