Projects
home:pandora:RobinOS23
cracklib
_service:download_src_package:cracklib-2.9.7-si...
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _service:download_src_package:cracklib-2.9.7-simplistic.patch of Package cracklib
diff --git a/lib/fascist.c b/lib/fascist.c index c5a018c..dc74ca9 100644 --- a/lib/fascist.c +++ b/lib/fascist.c @@ -55,7 +55,6 @@ static char *r_destructors[] = { "/?p@?p", /* purging out punctuation/symbols/junk */ "/?s@?s", - "/?X@?X", /* attempt reverse engineering of password strings */ @@ -452,6 +451,12 @@ GTry(rawtext, password) continue; } + if (len - strlen(mp) >= 3) + { + /* purged too much */ + continue; + } + #ifdef DEBUG printf("%-16s = %-16s (destruct %s)\n", mp, rawtext, r_destructors[i]); #endif @@ -478,6 +483,12 @@ GTry(rawtext, password) continue; } + if (len - strlen(mp) >= 3) + { + /* purged too much */ + continue; + } + #ifdef DEBUG printf("%-16s = %-16s (construct %s)\n", mp, password, r_constructors[i]); #endif @@ -705,6 +716,7 @@ FascistLookUser(PWDICT *pwp, char *instring, char *password; char rpassword[STRINGSIZE]; uint32_t notfound; + int len; notfound = PW_WORDS(pwp); /* already truncated if from FascistCheck() */ @@ -754,6 +766,7 @@ FascistLookUser(PWDICT *pwp, char *instring, return _("it is all whitespace"); } + len = strlen(password); i = 0; ptr = password; while (ptr[0] && ptr[1]) @@ -765,10 +778,9 @@ FascistLookUser(PWDICT *pwp, char *instring, ptr++; } - /* Change by Ben Karsin from ITS at University of Hawaii at Manoa. Static MAXSTEP - would generate many false positives for long passwords. */ - maxrepeat = 3+(0.09*strlen(password)); - if (i > maxrepeat) + /* We were still generating false positives for long passwords. + Just count systematic double as a single character. */ + if (len - i < MINLEN) { return _("it is too simplistic/systematic"); } @@ -801,6 +813,12 @@ FascistLookUser(PWDICT *pwp, char *instring, continue; } + if (len - strlen(a) >= 3) + { + /* purged too much */ + continue; + } + #ifdef DEBUG printf("%-16s (dict)\n", a); #endif @@ -821,6 +839,13 @@ FascistLookUser(PWDICT *pwp, char *instring, { continue; } + + if (len - strlen(a) >= 3) + { + /* purged too much */ + continue; + } + #ifdef DEBUG printf("%-16s (reversed dict)\n", a); #endif diff --git a/util/cracklib-format b/util/cracklib-format index 1d7be5b..0a2caa5 100644 --- a/util/cracklib-format +++ b/util/cracklib-format @@ -3,8 +3,10 @@ # This preprocesses a set of word lists into a suitable form for input # into cracklib-packer # +LC_ALL=C +export LC_ALL gzip -cdf "$@" | - grep -v '^\(#\|$\)' | - tr '[A-Z]' '[a-z]' | - tr -cd '\012[a-z][0-9]' | - env LC_ALL=C sort -u + grep -a -E -v '^.{32,}$' | + tr '[:upper:]' '[:lower:]' | + tr -cd '\n[:graph:]' | + sort -u -- 2.34.1
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.
浙ICP备2022010568号-2