public inbox for gnats-prs@sourceware.org
help / color / mirror / Atom feed
* gnats/395: gnats-pwconv
@ 2002-06-26  8:09 pmt
  0 siblings, 0 replies; only message in thread
From: pmt @ 2002-06-26  8:09 UTC (permalink / raw)
  To: pdm-gnats, gnats-prs, bug-gnats

>Number:         395
>Category:       gnats
>Synopsis:       gnats-pwconv
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    unassigned
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jun 26 11:06:42 -0400 2002
>Originator:     Pascal Meyrat
>Release:        gnats 4.0 beta 1
>Organization:

>Environment:
PC, Linux SuSE 7.3
>Description:
By converting gnats3 passwords to crypted passwords, "gnats-conv" returns: "salt" and "crypt() function return value". The crypt() function returns 13 printable characters and the first 2 characters already represent the "salt". So we have the salt twice. Therefore there will be a problem by checking passwords.
>How-To-Repeat:

>Fix:
In gnats-pwconv.c, change "result=asprintf(newpwentry, "%s%s",salt,crypt(clearpwstring,salt));" to "result=asprintf(newpwentry, "%s",crypt(clearpwstring,salt));"
>Unformatted:
 

_______________________________________________
Gnats-prs mailing list
Gnats-prs@gnu.org
http://mail.gnu.org/mailman/listinfo/gnats-prs


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2002-06-26 15:09 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2002-06-26  8:09 gnats/395: gnats-pwconv pmt

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).