|
|
Message-ID: <80f94207-a0dc-e527-4581-61a2af2d5614@mirbsd.de> Date: Sat, 7 Nov 2026 22:54:49 +0100 (CET) From: Thorsten Glaser <tg@...bsd.de> To: musl@...ts.openwall.com Subject: Re: [PATCH] [RFC] Harden against misuse of crypt On Sat, 7 Nov 2026, Szabolcs Nagy wrote: >fwiw busybox passwd accepts pretty much anything !=NULL into >the passwd db (one more reason to use NULL) They all do, but returning a short unmatchable hash, as musl currently does, is the better option. NULL really means functionality not supported and the expectation is that it is never returned. bye, //mirabilos -- “It is inappropriate to require that a time represented as seconds since the Epoch precisely represent the number of seconds between the referenced time and the Epoch.” -- IEEE Std 1003.1b-1993 (POSIX) Section B.2.2.2
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.