Project

General

Profile

Actions
Copy link

Submit #2295

closed

error code of crypt-blowfish

Added by logan1 almost 13 years ago. Updated almost 13 years ago.

Status:
Closed
Priority:
Low
Assignee:
-
Category:
-
Target version:
-
Start date:
01/30/2012
Due date:
% Done:

0%

Estimated time:

Description

According to http://www.openwall.com/lists/oss-security/2011/11/15/3,
On encountering an error, it should return something else than ':'.

Upon discussion with sjg@, we decided to change to NULL. According to
the man page(crypt(3)), upon an error, NULL should be returned.

I tested by changing hash from sha to blf and generating new passwords.

Files

bcrypt2.diff (1.33 KB) bcrypt2.diff logan1, 01/30/2012 11:19 AM
Actions
Copy link
 #1

Updated by sjg almost 13 years ago

  • Status changed from New to Closed

Committed to master.

Actions
Copy link

Also available in: Atom PDF