diff options
author | Rich Megginson <rmeggins@redhat.com> | 2009-07-15 10:31:00 -0600 |
---|---|---|
committer | Rich Megginson <rmeggins@redhat.com> | 2009-07-15 15:24:15 -0600 |
commit | 842abb57c509e18a4b4b987a50e90f19d233cfcc (patch) | |
tree | 618d5f6991c7de09e822dac06f09947efc9ee88c /aclocal.m4 | |
parent | 3276d926e61eac681c48172d1780a4650253254d (diff) | |
download | ds-842abb57c509e18a4b4b987a50e90f19d233cfcc.tar.gz ds-842abb57c509e18a4b4b987a50e90f19d233cfcc.tar.xz ds-842abb57c509e18a4b4b987a50e90f19d233cfcc.zip |
Fix unsalted password comparisons
Unsalted password comparison was broken by the switch from using the ldif base64 function to using the NSPR base64 function. The old function used to return the number of bytes. The new one does not. The code was assuming there was
always a salt, but this is not the case. Now, the code determines if there
is a salt by comparing the calculated length (hash_len) with the actual number
of bytes in the hash (shaLen).
Reviewed by: nhosoi (Thanks!)
Diffstat (limited to 'aclocal.m4')
0 files changed, 0 insertions, 0 deletions