upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-02-18 18:18:06 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Import minor security fix from -devel to resolve ITS#232.

Browse source
This commit is contained in:
Kurt Zeilenga 1999-07-20 20:27:42 +00:00
parent 36d0c37d01
commit 302f940586
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
CHANGES
View file

@ -4,6 +4,7 @@ Changes included in OpenLDAP 1.2 Release Engineering
CVS Tag: OPENLDAP_REL_ENG_1_2
Fixed slapd substring_comp_candidates null intersection bug (ITS#228)
Fixed slapd modify: delete of last attribute value bug (ITS#229)
Import password security fix from -devel (ITS#232)
Build environment
Updated to latest Autoconf (AnonCVS)
Updated to latest aclocal from Automake (AnonCVS)

4
libraries/liblutil/passwd.c
View file

@ -98,7 +98,7 @@ lutil_passwd(
lutil_SHA1Final(SHA1digest, &SHA1context);
/* compare */
rc = strncmp((char *)orig_pass, (char *)SHA1digest, sizeof(SHA1digest));
rc = memcmp((char *)orig_pass, (char *)SHA1digest, sizeof(SHA1digest));
free(orig_pass);
return(rc);
@ -128,7 +128,7 @@ lutil_passwd(
lutil_MD5Final(MD5digest, &MD5context);
/* compare */
rc = strncmp((char *)orig_pass, (char *)MD5digest, sizeof(MD5digest));
rc = memcmp((char *)orig_pass, (char *)MD5digest, sizeof(MD5digest));
free(orig_pass);
return ( rc );