Alexander Pyhalov
2016-12-09 a6d6f1a3b6b5112d903e08b9956997393b39feea
7657 OpenVPN incorrectly read passwords from stdin
1 files added
1 files modified
17 ■■■■■ changed files
components/network/openvpn/Makefile 2 ●●● patch | view | raw | blame | history
components/network/openvpn/patches/getpassphrase.patch 15 ●●●●● patch | view | raw | blame | history
components/network/openvpn/Makefile
@@ -17,7 +17,7 @@
COMPONENT_NAME=        openvpn
COMPONENT_VERSION=    2.3.13
COMPONENT_REVISION=    1
COMPONENT_REVISION=    2
COMPONENT_SRC=        $(COMPONENT_NAME)-$(COMPONENT_VERSION)
COMPONENT_ARCHIVE=    $(COMPONENT_SRC).tar.xz
COMPONENT_ARCHIVE_HASH=    sha256:9cde0c8000fd32d5275adb55f8bb1d8ba429ff3de35f60a36e81f3859b7537e0
components/network/openvpn/patches/getpassphrase.patch
New file
@@ -0,0 +1,15 @@
--- src/openvpn/console.c.~1~    2016-11-03 11:52:28.000000000 +0300
+++ src/openvpn/console.c    2016-12-09 12:15:13.455657513 +0300
@@ -241,7 +241,12 @@
     }
   else
     {
+#ifdef __sun
+      /* On Solaris getpass() returns up to 8 symbols */
+      char *gp = getpassphrase (prompt);
+#else
       char *gp = getpass (prompt);
+#endif
       if (gp)
     {
       strncpynt (input, gp, capacity);