]> granicus.if.org Git - linux-pam/commit
Trim password at PAM_MAX_RESP_SIZE chars
authorFlorian Best <best@univention.de>
Wed, 26 Jun 2019 11:49:23 +0000 (13:49 +0200)
committerTomáš Mráz <t8m@users.noreply.github.com>
Thu, 27 Jun 2019 16:23:16 +0000 (18:23 +0200)
commit65816326c285c5d5eec51766e1de329f177c28f7
treebc5b59f3d03aad32a8d6573ef2e3139f9f53cb7b
parentb49488bc884454323553bb95b01a7765312fb515
Trim password at PAM_MAX_RESP_SIZE chars

Issue #118: Protect against Denial of Service attacks.
To prevent hashsum generation via crypt of very long passwords the
password is now stripped to 512 characters. This is equivalent behavior
to unix_chkpwd.
modules/pam_unix/support.c