mirror of
https://github.com/opnsense/src.git
synced 2026-04-27 00:58:36 -04:00
1) " ext" length should be included into OPIE_CHALLENGE_MAX (as all places of opie code expects that). 2) Overflow check in challenge.c is off by 1 even with corrected OPIE_CHALLENGE_MAX 3) When fallback to randomchallenge() happens and rval is 0 (i.e. challenge is too long), its value should be set to error state too. To demonstrate the bug, run opiepasswd with valid seed: opiepasswd -s 1234567890123456 and notice that it falls back to randomchallenge() (i.e. no 1234567890123456 in the prompt). PR: 191511 Submitted by: mitsururike@gmail.com (partially) MFC after: 1 week |
||
|---|---|---|
| .. | ||
| accessfile.c | ||
| atob8.c | ||
| btoa8.c | ||
| btoe.c | ||
| btoh.c | ||
| challenge.c | ||
| generator.c | ||
| getsequence.c | ||
| getutmpentry.c | ||
| hash.c | ||
| hashlen.c | ||
| insecure.c | ||
| keycrunch.c | ||
| lock.c | ||
| login.c | ||
| logwtmp.c | ||
| lookup.c | ||
| Makefile.in | ||
| md4c.c | ||
| md5c.c | ||
| newseed.c | ||
| open.c | ||
| parsechallenge.c | ||
| passcheck.c | ||
| passwd.c | ||
| randomchallenge.c | ||
| readpass.c | ||
| readrec.c | ||
| unlock.c | ||
| verify.c | ||
| version.c | ||
| writerec.c | ||