Update of bug #18170 (project freeciv):
Status:None = In Progress
Assigned to:None = jtn
___
Reply to this item at:
Follow-up Comment #7, bug #18170 (project freeciv):
My inclination is to find a more portable implementation of
md5sum, rather than trying to fix up this one.
A quick Google finds this one, which seems to fit the bill:
Follow-up Comment #6, bug #18170 (project freeciv):
Such an option is really rarely needed, and really shouldn't be
used by accident, so I wonder if it should be commandline-option
at all or only in database access configuration file (I haven't
checked new authentication database access
Follow-up Comment #3, bug #18170 (project freeciv):
Conversely, the effect of fixing this bug is that any big-endian
server operators will effectively lose all their passwords
(unless we put in a backwards-compatibility wart). Probably not
one to drop into a stable release update, then.
Follow-up Comment #4, bug #18170 (project freeciv):
Hmm.
Unfortunately it's not possible to provide a one-time procedure to fix the
hashed passwords in corrupted databases, by the nature of the one-way hash.
I think the SWAP() macro is only used on input -- the hash is still MD5, it's
just
Follow-up Comment #5, bug #18170 (project freeciv):
How about a server option for bug-compatibility, allowing server
operators who are afflicted with such databases to carry on?
That's what I was about to propose. This gives server operators the freedom
to decide when they make the switch to
Follow-up Comment #2, bug #18170 (project freeciv):
Can't reproduce on my x86_64 machine -- the code gives the right answer for
the example given. A possibly relevant difference is that sparc64 is
big-endian whereas x86_64 is little-endian.
In fact, I'm pretty sure that's what it is. This code
Follow-up Comment #1, bug #18170 (project freeciv):
MD5 in Freeciv is used for user authentication in the server (not an area
into which I've ventured before, as it involves faffing with databases).
Our MD5 implementation appears to have been pinched from glibc in around 2005
(r10768
URL:
http://gna.org/bugs/?18170
Summary: md5 sum broken in trunk on sparc64
Project: Freeciv
Submitted by: akfaew
Submitted on: Sun 29 May 2011 11:31:09 AM GMT
Category: None
Severity: 4 - Important
