CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2014/12/24 15:10:34
Modified files:
lib/libc/crypt : cryptutil.c
Log message:
simplify crypt_checkpass. The API promise is that this function doesn't
use global data. The simplest fix is to only check blowfish passwords,
and implicitly lock out DES passwords.
crypt_checkpass is currently only used in one place, passwd, to verify
the local user's password, so this is probably acceptable.
Gives people a little more time to migrate away from DES before introduing
checkpass into more places.
