提交 7ba08a4d 编写于 作者: D Dr. Stephen Henson

Use correct length when prompting for password.

Use bufsiz - 1 not BUFSIZ - 1 when prompting for a password in
the openssl utility.

Thanks to Rob Mackinnon, Leviathan Security for reporting this issue.
上级 dbb7654d
...@@ -588,12 +588,12 @@ int password_callback(char *buf, int bufsiz, int verify, ...@@ -588,12 +588,12 @@ int password_callback(char *buf, int bufsiz, int verify,
if (ok >= 0) if (ok >= 0)
ok = UI_add_input_string(ui,prompt,ui_flags,buf, ok = UI_add_input_string(ui,prompt,ui_flags,buf,
PW_MIN_LENGTH,BUFSIZ-1); PW_MIN_LENGTH,bufsiz-1);
if (ok >= 0 && verify) if (ok >= 0 && verify)
{ {
buff = (char *)OPENSSL_malloc(bufsiz); buff = (char *)OPENSSL_malloc(bufsiz);
ok = UI_add_verify_string(ui,prompt,ui_flags,buff, ok = UI_add_verify_string(ui,prompt,ui_flags,buff,
PW_MIN_LENGTH,BUFSIZ-1, buf); PW_MIN_LENGTH,bufsiz-1, buf);
} }
if (ok >= 0) if (ok >= 0)
do do
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册