emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

Increase the size of crypt_passwd from 128 to 256 to avoid overflow in

Browse Source 
case of SHA512 (161 should be sufficient).
This commit is contained in:
nekral-guest
2007-11-20 12:18:36 +00:00
parent 63a4e65ca1
commit 5cb462d767
2 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@@ -1,3 +1,8 @@
2007-11-20 Nicolas François <nicolas.francois@centraliens.net>
* src/passwd.c: Increase the size of crypt_passwd from 128 to 256
to avoid overflow in case of SHA512 (161 should be sufficient).
2007-11-20 Nicolas François <nicolas.francois@centraliens.net> 2007-11-20 Nicolas François <nicolas.francois@centraliens.net>
* lib/prototypes.h, libmisc/salt.c: Add parameters to * lib/prototypes.h, libmisc/salt.c: Add parameters to

15
src/passwd.c
View File

@@ -96,7 +96,20 @@ static long inact = 0; /* Days without change before locked */
static int do_update_age = 0; static int do_update_age = 0;
#ifndef USE_PAM #ifndef USE_PAM
static char crypt_passwd[128]; /* The "old-style" password, if present */ /*
* Size of the biggest passwd:
* $6$ 3
* rounds= 7
* 999999999 9
* $ 1
* salt 16
* $ 1
* SHA512 123
* nul 1
*
* total 161
*/
static char crypt_passwd[256];
static int do_update_pwd = 0; static int do_update_pwd = 0;
#endif #endif