Actions
Submit #2295
closed
error code of crypt-blowfish
Status:
Closed
Priority:
Low
Assignee:
-
Category:
-
Target version:
-
Start date:
01/30/2012
Due date:
% Done:
0%
Estimated time:
Description
According to http://www.openwall.com/lists/oss-security/2011/11/15/3,
On encountering an error, it should return something else than ':'.
Upon discussion with sjg@, we decided to change to NULL. According to
the man page(crypt(3)), upon an error, NULL should be returned.
I tested by changing hash from sha to blf and generating new passwords.
Files
Updated by
Actions