diff options
| author | des <des@FreeBSD.org> | 2011-11-20 15:18:49 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 2011-11-20 15:18:49 +0000 |
| commit | bf5f03ca46a93268d5d0eccc7318039bda9106d2 (patch) | |
| tree | 719a4f3c784b1b7ddabd2ea0fc228467ccfd7b38 /sys/fs/nfsclient/nfs_clrpcops.c | |
| parent | 4de38879e5e0ffa7986549aa0beda02dce5e3438 (diff) | |
| download | FreeBSD-src-bf5f03ca46a93268d5d0eccc7318039bda9106d2.zip FreeBSD-src-bf5f03ca46a93268d5d0eccc7318039bda9106d2.tar.gz | |
key_load_private() ignores the passphrase argument if the private key
is unencrypted. This defeats the nullok check, because it means a
non-null passphrase will successfully unlock the key.
To address this, try at first to load the key without a passphrase.
If this succeeds and the user provided a non-empty passphrase *or*
nullok is false, reject the key.
MFC after: 1 week
Noticed by: Guy Helmer <guy.helmer@palisadesystems.com>
Diffstat (limited to 'sys/fs/nfsclient/nfs_clrpcops.c')
0 files changed, 0 insertions, 0 deletions
