Re: Bug#714219: [Debian #714219] libc6: crypt(3) returns NULL with EINVAL instead of falling back to DES, breaking GNU software

2013-07-03 Thread Carlos O'Donell
On Tue, Jul 2, 2013 at 12:52 PM, Alexandre Oliva aol...@redhat.com wrote: At this point, I'd rather we took the opportunity to fix code that makes unsafe assumptions about the behavior of crypt than push the problem on for users to figure out when a glibc upgrade causes passwords to fail to be

Bug#714219: [Debian #714219] libc6: crypt(3) returns NULL with EINVAL instead of falling back to DES, breaking GNU software

2013-07-02 Thread Alexandre Oliva
On Jul 1, 2013, Thorsten Glaser t...@mirbsd.de wrote: This would always avoid returning a NULL value, thus unbreaking all applications that use that assumption. It seems to me that this would turn a very visible fault into a silent fault. In general, the former is more desirable; consider