Beefy Boxes and Bandwidth Generously Provided by pair Networks
laziness, impatience, and hubris
 
PerlMonks  

Re: Weird crypt Behavior

by gsar (Acolyte)
on Sep 17, 2002 at 21:21 UTC ( [id://198652]=note: print w/replies, xml ) Need Help??


in reply to Re: Re: Weird crypt Behavior
in thread Weird crypt Behavior

Thanks. In fact, it was discovered internally only yesterday and fixed.

The problem is that ActivePerl uses the crypt_r() function which needs a buffer to work with, and that argument requires one of its fields to be nulled. ActivePerl allocates this buffer on the stack, so the said field may be non-null.

The following patch has been checked in:

--- ./pp.c.~1~ Tue Sep 17 14:17:07 2002 +++ ./pp.c Tue Sep 17 14:17:07 2002 @@ -2347,6 +2347,7 @@ # if defined(__linux__) # include <crypt.h> struct crypt_data c_data; + c_data.initialized = 0; # define crypt(k,s) crypt_r(k,s,&c_data) # endif #endif End of Patch.

There should be a new release out for Linux ASAP.

Replies are listed 'Best First'.
Re^2: Weird crypt Behavior
by Flexx (Pilgrim) on Sep 18, 2002 at 20:20 UTC

    Hi!

    Good catch. And good that this was frontpaged. Given the impact on password secutity this potentially has, I'd want to see this on other very prominent places (use.perl.org, perl.com, and on the p5p of course... Is ActiveState going to be active and state some comments?

    So long,
    Flexx

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://198652]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others chilling in the Monastery: (7)
As of 2024-04-24 03:30 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found