[SSSD] [PATCH] Support password obfuscation in sssd.conf

Stephen Gallagher sgallagh at redhat.com
Fri Sep 3 18:16:04 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Patch 0001: Ack.
Patch 0002: Ack.

Patch 0003: Nack

>>> [PATCH 3/7] Password obfuscation utility functions

>> Your b64_encode function declaration is confusing. Please change the
>> variable name "obufsize" to make it clear that it is the size of the
>> input buffer to the function, not the output size.

You changed the wrong variable name. The ofbufsize argument is
describing the size of the input buffer, not the size of the output
buffer (which is allocated internally by BTOA_DataToAscii)

> 
>> We probably want to include a NULL byte (or some other, more-complicated
>> terminator like "\0\1\2\3") at the end of the buffer that we can check
>> before blindly reading memory in. This way we can tell if we have a
>> corrupted or simply wrong obfuscated password.

A good start, but I think you missed the point a little bit. I want us
to read up to ctsize, then test that the four bytes p+ctsize are the
sentinel.

This way if the buffer is corrupt or malicious (e.g. the ctsize ==
MAX_UINT16) we aren't suddenly allocating and copying 64MB of data.


Patch 0004: Ack.
Patch 0005: Ack.
Patch 0006: Ack.
Patch 0007: Ack.

Almost there :)

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkyBO2QACgkQeiVVYja6o6OT7QCfbLjJa3c8N6Nwhc1Wc0hEyFfy
jlEAoLHoCaT1fd/ZsHAXI0hzuDWgieVN
=y777
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list