Paul Schinder <[EMAIL PROTECTED]> wrote:

>At 3:21 PM -0500 2/10/00, Dave Sill wrote:
>>
>>Solaris 7 SPARC, gcc 2.8.1.
>
>Compiler bug, maybe?

Well, I did some "printf" debugging, and it looks like a bug in the
checkappopw code. It reads the username/password from descriptor 3
into a string called "up", then sets "login" and "password" to point
into that string. Later, right before it compares the calculated
digest to "password", it fills "up" with nulls, clearing "password".
I commented out the line:

  for (i = 0;i < sizeof(up);++i) up[i] = 0;

And it works fine. Are you using checkpw 0.51?

Thanks for your help.

-Dave

Reply via email to