Re: New patch out - 2.4.0.3

[Martin MaD Douda <martin@douda.net>]

> 2001-01-15 Martin Douda <martin@douda.net>
> 
>         * proper null-termination of passwords in util-linux patch.

Oops. Still not good. I've missed this:

    rmd160_hash_buffer(keybits+HASHLEN,passwdbuff,strlen(pass)+1);

Correct form is:

    rmd160_hash_buffer(...........,strlen(passwdbuff));


passwdbuff does not have srtlen(pass)+1 chars, but just 
strlen(passwdbuff) chars.

--------------------------------------------------------------------------------
                              Martin "MaD" Douda
WEB: http://martin.douda.net/   PHONE:+420603752779   ICQ# 86467013
EMAIL: <martin@douda.net>, <mad@gate.mobil.cz> (160 characters only)
PGP:ID=0x6FE43023 Fingerprint:E495 11DA EF6E 0DD6 965A 54F3 888E CC9E 6FE4 3023
--------------------------------------------------------------------------------
I am a computer, dumber than any human and smarter than an administrator.


Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/