Hello Stefan,

I was revieweing your patch, and I was concerned about passing data.dptr directly to crypt(). Are you sure it's safe? I cannot find any reference in the db documentation as to whether or not the datum returned by dbm_fetch is guaranteed to be NUL-terminated, but I believe it isn't. Certainly crypt() expects a normal C zero-terminated string.

-kv


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to