The following issue has been SUBMITTED. ====================================================================== http://dbmail.org/mantis/view.php?id=1090 ====================================================================== Reported By: AndroSyn Assigned To: ====================================================================== Project: DBMail Issue ID: 1090 Category: Authentication layer Reproducibility: random Severity: major Priority: normal Status: new target: ====================================================================== Date Submitted: 19-Oct-17 18:39 CEST Last Modified: 19-Oct-17 18:39 CEST ====================================================================== Summary: dbmail uses crypt() instead of crypt_r() Description: We get spurious authentication failures due to the fact that crypt() is not a reentrant function. This only shows up under high load, crypt_r should be used instead.
Attached a patch that should work on glibc at least ====================================================================== Issue History Date Modified Username Field Change ====================================================================== 19-Oct-17 18:39 AndroSyn New Issue 19-Oct-17 18:39 AndroSyn File Added: crypt_r.diff ====================================================================== _______________________________________________ Dbmail-dev mailing list Dbmail-dev@dbmail.org http://lists.nfg.nl/mailman/listinfo/dbmail-dev
