Attention is currently required from: flichtenheld, plaisthos.

cron2 has posted comments on this change. ( 
http://gerrit.openvpn.net/c/openvpn/+/787?usp=email )

Change subject: Refuse clients if username or password is > USER_PASS_LEN
......................................................................


Patch Set 1:

(1 comment)

File src/openvpn/ssl.c:

http://gerrit.openvpn.net/c/openvpn/+/787/comment/144948ce_63eadfa8 :
PS1, Line 2284:         abs(username_len), abs(password_len));
> I think a negative length is more alarming and confusing that a positive one. 
> […]
You have two messages there - the "TLS INFO:" which is always printed, and only 
has a negative number if one of the strings is too long.  This is what I'm 
talking about.

The second message is the "TLS Error:" which is only printed in case of 
overflow - the abs() is reasonable there.

So I'd suggest to remove the "TLS INFO:" message, because in case of errors 
it's just duplicate information, and in case of non-errors, it's log noise.  No?



--
To view, visit http://gerrit.openvpn.net/c/openvpn/+/787?usp=email
To unsubscribe, or for help writing mail filters, visit 
http://gerrit.openvpn.net/settings

Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I60f02c919767eb8f1b95253689a8233f5f68621d
Gerrit-Change-Number: 787
Gerrit-PatchSet: 1
Gerrit-Owner: plaisthos <arne-open...@rfc2549.org>
Gerrit-Reviewer: cron2 <g...@greenie.muc.de>
Gerrit-Reviewer: flichtenheld <fr...@lichtenheld.com>
Gerrit-CC: openvpn-devel <openvpn-devel@lists.sourceforge.net>
Gerrit-Attention: plaisthos <arne-open...@rfc2549.org>
Gerrit-Attention: flichtenheld <fr...@lichtenheld.com>
Gerrit-Comment-Date: Mon, 28 Oct 2024 10:09:14 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: plaisthos <arne-open...@rfc2549.org>
Comment-In-Reply-To: cron2 <g...@greenie.muc.de>
Gerrit-MessageType: comment
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to