From d2e144fbe85bda158b8f8dc37eefdec358d88107 Mon Sep 17 00:00:00 2001 From: bz Date: Wed, 30 May 2012 12:01:28 +0000 Subject: Update the previous openssl fix. [12:01] Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02] Security: FreeBSD-SA-12:01.openssl (revised) Security: FreeBSD-SA-12:02.crypt Approved by: so (bz, simon) --- secure/lib/libcrypt/crypt-des.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'secure') diff --git a/secure/lib/libcrypt/crypt-des.c b/secure/lib/libcrypt/crypt-des.c index 9adff93..6bb9bc0 100644 --- a/secure/lib/libcrypt/crypt-des.c +++ b/secure/lib/libcrypt/crypt-des.c @@ -606,7 +606,7 @@ crypt_des(const char *key, const char *setting) q = (u_char *)keybuf; while (q - (u_char *)keybuf - 8) { *q++ = *key << 1; - if (*(q - 1)) + if (*key != '\0') key++; } if (des_setkey((char *)keybuf)) -- cgit v1.1