screen-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[screen-devel] [bug #36312] PATCH: screen does not properly handle crypt


From: LukášNykrýn
Subject: [screen-devel] [bug #36312] PATCH: screen does not properly handle crypt() returning NULL
Date: Thu, 26 Apr 2012 08:50:11 +0000
User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.106 Safari/535.2

URL:
  <http://savannah.gnu.org/bugs/?36312>

                 Summary: PATCH: screen does not properly handle crypt()
returning NULL
                 Project: GNU Screen
            Submitted by: lnykryn
            Submitted on: Thu 26 Apr 2012 08:50:10 AM GMT
                Category: None
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None
           Fixed Release: None
         Planned Release: None
           Work Required: None

    _______________________________________________________

Details:

crypt() can return NULL, but screen uses functions like strcmp() directly on
the return value of crypt().

crypt() can return NULL when the system is in fips mode and the hashing
algorithm passed via the salt value is not allowed (eg md5)



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Thu 26 Apr 2012 08:50:10 AM GMT  Name: crypt.patch  Size: 3kB   By:
lnykryn

<http://savannah.gnu.org/bugs/download.php?file_id=25740>

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?36312>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]