| Summary | Crypt Blowfish add an extra \0 character to passwords |
| Queue | Horde Framework Packages |
| Queue Version | Git master |
| Type | Bug |
| State | Duplicate |
| Priority | 3. High |
| Owners | |
| Requester | rui.carneiro (at) portugalmail (dot) net |
| Created | 07/20/2010 (5436 days ago) |
| Due | |
| Updated | 07/20/2010 (5436 days ago) |
| Assigned | |
| Resolved | 07/20/2010 (5436 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | |
| Patch | Yes |
Bug #9121.State ⇒ Duplicate
Bug #9121.Priority ⇒ 3. High
New Attachment: 0001-We-should-trim-passwords-before-using-them-http-pear.patch
Patch ⇒ Yes
Milestone ⇒
Queue ⇒ Horde Framework Packages
Summary ⇒ Crypt Blowfish add an extra \0 character to passwords
Type ⇒ Bug
State ⇒ Unconfirmed
Quoting: "When the length of a plain string is not a multiple of 8,
decrypt() return a result with a NUL chars block appened to the end
(which length is a multiple of 8)."
----
So if we are decrypting a password not multiple of 8 we should trim
the "\0" from the decrypted result.
I found this bug because i wasn't able to use Horde with an ImapProxy.