Revision a520723f29aac6598ff0d69e34f5e9b88213e511 authored by Matt Caswell on 14 October 2016, 12:07:00 UTC, committed by Matt Caswell on 28 October 2016, 08:43:41 UTC
The previous commit inspired a review of all the length checks for the extension adding code. This adds more robust checks and adds checks where some were missing previously. The real solution for this is to use WPACKET which is currently in master - but that cannot be applied to release branches. Reviewed-by: Rich Salz <rsalz@openssl.org>
1 parent 83a1d4b
ui_compat.pod
=pod
=head1 NAME
des_read_password, des_read_2passwords, des_read_pw_string, des_read_pw -
Compatibility user interface functions
=head1 SYNOPSIS
#include <openssl/des_old.h>
int des_read_password(DES_cblock *key,const char *prompt,int verify);
int des_read_2passwords(DES_cblock *key1,DES_cblock *key2,
const char *prompt,int verify);
int des_read_pw_string(char *buf,int length,const char *prompt,int verify);
int des_read_pw(char *buf,char *buff,int size,const char *prompt,int verify);
=head1 DESCRIPTION
The DES library contained a few routines to prompt for passwords. These
aren't necessarely dependent on DES, and have therefore become part of the
UI compatibility library.
des_read_pw() writes the string specified by I<prompt> to standard output
turns echo off and reads an input string from the terminal. The string is
returned in I<buf>, which must have spac for at least I<size> bytes.
If I<verify> is set, the user is asked for the password twice and unless
the two copies match, an error is returned. The second password is stored
in I<buff>, which must therefore also be at least I<size> bytes. A return
code of -1 indicates a system error, 1 failure due to use interaction, and
0 is success. All other functions described here use des_read_pw() to do
the work.
des_read_pw_string() is a variant of des_read_pw() that provides a buffer
for you if I<verify> is set.
des_read_password() calls des_read_pw() and converts the password to a
DES key by calling DES_string_to_key(); des_read_2password() operates in
the same way as des_read_password() except that it generates two keys
by using the DES_string_to_2key() function.
=head1 NOTES
des_read_pw_string() is available in the MIT Kerberos library as well, and
is also available under the name EVP_read_pw_string().
=head1 SEE ALSO
L<ui(3)|ui(3)>, L<ui_create(3)|ui_create(3)>
=head1 AUTHOR
Richard Levitte (richard@levitte.org) for the OpenSSL project
(http://www.openssl.org).
=cut

Computing file changes ...