mancha's vault Files

Starting with glibc 2.17 (eglibc 2.17), the crypt() function will
return NULL with EINVAL when supplied a bad salt. Further, in the
case of unsupported salts (i.e. DES and MD5) while in FIPS-140 mode,
crypt() will return NULL with EPERM.

As a result, many programs that rely on glibc's crypt() need to be
patched to account for possible NULL returns and avoid null-pointer
dereferences that in the case of services can result in DoS.

This directory contains a set of patches (most of which I authored)
that fix the handling of the crypt() in glibc 2.17 onwards.

Note: All the patches I've authored have been submitted upstream
      and, with a single exception (yptools developer seems to be
      AWOL), have been mainlined.

--mancha