]> jfr.im git - irc/atheme/atheme.git/commit
projects / irc / atheme / atheme.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 99ef61d)
modules/crypto/posix: fix potential NULL deref on password verify
authorAaron Jones <redacted>
Thu, 5 Oct 2017 22:56:41 +0000 (22:56 +0000)
committerAaron Jones <redacted>
Thu, 5 Oct 2017 22:56:41 +0000 (22:56 +0000)
commitb44f9e28e1723cf3f068275eae1e0fafa000c194
treea69878be306a59781a544c1a85b57426f0de68a4tree | snapshot (zip tar.bz2 tar.gz)
parent99ef61dd2de8f64b01e7a1272e4399a196440e75commit | diff
modules/crypto/posix: fix potential NULL deref on password verify

If we have an encrypted password from the database that does not
contain a '$' in it (as is the case for the original deprecated
pbkdf2 module) then when posix tries to verify the hash it will
segfault because we assume a '$' is present.
modules/crypto/posix.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.