git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH 3/4] git-cvsserver: do not try to descramble empty password

From
ÁLÁshin László <ashinlaszlo@gmail.com>
Date
Jul 3, 2010, 21:23 UTC
Message-ID
<AANLkTikUyBMOASPSQeyMLa_Vhp0QdP__c0kIsCMarY8L@mail.gmail.com>
In-Reply-To
<-1644121413921817001@unknownmsgid>
 git-cvsserver.perl |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)
diff --git a/git-cvsserver.perl b/git-cvsserver.perl
index 46e5fdb..01c5b21 100755
--- a/git-cvsserver.perl
+++ b/git-cvsserver.perl
@@ -235,11 +235,15 @@ if ($state->{method} eq 'pserver') {
            exit 1;
        }

+        if (length($password) > 0) {
+            $password = descramble($password);
+        }
+
        my $auth_ok;
        open my $passwd, "<", $authdb or die $!;
        while (<$passwd>) {
            if (m{^\Q$user\E:(.*)}) {
-                if (crypt($user, descramble($password)) eq $1) {
+                if (crypt($user, $password) eq $1) {
                    $auth_ok = 1;
                }
            };
--
1.7.2.rc1.dirty
Message 1 of 1 in “git-cvsserver: do not try to descramble empty password”
  1. 3/4 git-cvsserver: do not try to descramble empty passwordÁshin László, Jul 3, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.