Apple-2gs-SW/hush
1
0
Fork 0
mirror of https://github.com/sheumann/hush.git synced 2024-12-27 01:32:08 +00:00
Code Issues Projects Releases Wiki Activity

Vladimir N. Oleynik writes:

Browse Source 
This moment have algoritmicaly problem, not overflow:
    strcat(wrapped, wrapped) - may be looped.

    Hand patch:

    - else if (strstr(strcat(wrapped, wrapped), newmono))
    + else {
    +    safe_strncpy(wrapped + lenwrap, wrapped, lenwrap + 1);
    +    if (strstr(wrapped, newmono))
    +}

    --w
    vodz
This commit is contained in:
Eric Andersen 2003-07-30 07:57:06 +00:00
parent b99aec0ba5
commit 3124a9ecee
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libbb/obscure.c
View File

@ -157,8 +157,11 @@ password_check(const char *old, const char *newval, const struct passwd *pwdp)
else if (similiar(wrapped, newmono)) else if (similiar(wrapped, newmono))
msg = "too similiar"; msg = "too similiar";
else if (strstr(strcat(wrapped, wrapped), newmono)) else {
safe_strncpy(wrapped + lenwrap, wrapped, lenwrap + 1);
if (strstr(wrapped, newmono))
msg = "rotated"; msg = "rotated";
}
bzero(newmono, strlen(newmono)); bzero(newmono, strlen(newmono));
bzero(wrapped, lenwrap); bzero(wrapped, lenwrap);