git.schokokeks.org
Repositories
Help
Report an Issue
keks-overlay.git
Code
Commits
Branches
Tags
Suche
Strukturansicht:
b0a4f5f
Branches
Tags
master
keks-overlay.git
dev-libs
apr-util
files
apr-util-limit-bcrypt-dos.patch
apr-util protection against htpasswd dos
Hanno Böck
commited
b0a4f5f
at 2016-11-30 12:41:24
apr-util-limit-bcrypt-dos.patch
Blame
History
Raw
--- a/crypto/crypt_blowfish.c 2012-07-06 13:41:24.000000000 +0200 +++ b/crypto/crypt_blowfish.c 2016-09-21 17:06:32.993929364 +0200 @@ -877,7 +877,7 @@ char *_crypt_gensalt_blowfish_rn(const c const char *input, int size, char *output, int output_size) { if (size < 16 || output_size < 7 + 22 + 1 || - (count && (count < 4 || count > 31)) || + (count && (count < 4 || count > 17)) || prefix[0] != '$' || prefix[1] != '2' || (prefix[2] != 'a' && prefix[2] != 'y')) { if (output_size > 0) output[0] = '\0';
