30 Jun 10:19
[PATCH] srptool, fix problem where passwords never match
From: Matthias Koenig <mkoenig <at> suse.de>
Subject: [PATCH] srptool, fix problem where passwords never match
Newsgroups: gmane.comp.encryption.gpg.gnutls.devel
Date: 2008-06-30 08:21:43 GMT
Subject: [PATCH] srptool, fix problem where passwords never match
Newsgroups: gmane.comp.encryption.gpg.gnutls.devel
Date: 2008-06-30 08:21:43 GMT
Hi,
this fixes a problem in srptool, where the passwords never match
(--verify check) on some architectures (I think I have observed
this only on i386). It is for 1.6.1, but still applies to 2.4.0.
Matthias
Index: gnutls-1.6.1/src/crypt.c
===================================================================
--- gnutls-1.6.1.orig/src/crypt.c
+++ gnutls-1.6.1/src/crypt.c
@@ -220,6 +220,7 @@ _verify_passwd_int (const char *username
/* encode the verifier into _salt */
salt_size = sizeof (_salt);
+ memset(_salt, '\0', salt_size);
if (gnutls_srp_base64_encode (&new_verifier, _salt, &salt_size) < 0)
{
fprintf (stderr, "Encoding error\n");
RSS Feed