Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <80f94207-a0dc-e527-4581-61a2af2d5614@mirbsd.de>
Date: Sat, 7 Nov 2026 22:54:49 +0100 (CET)
From: Thorsten Glaser <tg@...bsd.de>
To: musl@...ts.openwall.com
Subject: Re: [PATCH] [RFC] Harden against misuse of crypt

On Sat, 7 Nov 2026, Szabolcs Nagy wrote:

>fwiw busybox passwd accepts pretty much anything !=NULL into
>the passwd db (one more reason to use NULL)

They all do, but returning a short unmatchable hash, as musl
currently does, is the better option.

NULL really means functionality not supported and the expectation
is that it is never returned.

bye,
//mirabilos
-- 
“It is inappropriate to require that a time represented as
 seconds since the Epoch precisely represent the number of
 seconds between the referenced time and the Epoch.”
	-- IEEE Std 1003.1b-1993 (POSIX) Section B.2.2.2

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.