Mailing List Archive

[DBMail 0001090]: dbmail uses crypt() instead of crypt_r()
The following issue has been SUBMITTED.
======================================================================
http://dbmail.org/mantis/view.php?id=1090
======================================================================
Reported By: AndroSyn
Assigned To:
======================================================================
Project: DBMail
Issue ID: 1090
Category: Authentication layer
Reproducibility: random
Severity: major
Priority: normal
Status: new
target:
======================================================================
Date Submitted: 19-Oct-17 18:39 CEST
Last Modified: 19-Oct-17 18:39 CEST
======================================================================
Summary: dbmail uses crypt() instead of crypt_r()
Description:
We get spurious authentication failures due to the fact that crypt() is not
a reentrant function. This only shows up under high load, crypt_r should
be used instead.

Attached a patch that should work on glibc at least
======================================================================

Issue History
Date Modified Username Field Change
======================================================================
19-Oct-17 18:39 AndroSyn New Issue
19-Oct-17 18:39 AndroSyn File Added: crypt_r.diff
======================================================================

_______________________________________________
Dbmail-dev mailing list
Dbmail-dev@dbmail.org
http://lists.nfg.nl/mailman/listinfo/dbmail-dev