[PATCH] srptool, fix problem where passwords never match

Matthias Koenig mkoenig at suse.de
Mon Jun 30 10:21:43 CEST 2008


Hi,

this fixes a problem in srptool, where the passwords never match
(--verify check) on some architectures (I think I have observed
this only on i386). It is for 1.6.1, but still applies to 2.4.0.

Matthias

Index: gnutls-1.6.1/src/crypt.c
===================================================================
--- gnutls-1.6.1.orig/src/crypt.c
+++ gnutls-1.6.1/src/crypt.c
@@ -220,6 +220,7 @@ _verify_passwd_int (const char *username
 
   /* encode the verifier into _salt */
   salt_size = sizeof (_salt);
+  memset(_salt, '\0', salt_size);
   if (gnutls_srp_base64_encode (&new_verifier, _salt, &salt_size) < 0)
     {
       fprintf (stderr, "Encoding error\n");





More information about the Gnutls-devel mailing list