diff options
| author | Yann Ylavic <ylavic@apache.org> | 2017-02-02 13:14:16 +0000 |
|---|---|---|
| committer | Yann Ylavic <ylavic@apache.org> | 2017-02-02 13:14:16 +0000 |
| commit | 9441dde01ec90640587b698fc932d2d2bcb2efb1 (patch) | |
| tree | 74287704dcee14fa6ae364e05b57d73e258e5041 /crypto/crypt_blowfish.c | |
| parent | 52dc709748663284008e11aff19d6504434e2a5a (diff) | |
| download | apr-9441dde01ec90640587b698fc932d2d2bcb2efb1.tar.gz | |
apr_crypto: follow up to r1772803.
Still avoid excessive bcrypt iterations, verification side this time.
git-svn-id: https://svn.apache.org/repos/asf/apr/apr/trunk@1781391 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'crypto/crypt_blowfish.c')
| -rw-r--r-- | crypto/crypt_blowfish.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/crypt_blowfish.c b/crypto/crypt_blowfish.c index 013c1ed82..3d306cf8d 100644 --- a/crypto/crypt_blowfish.c +++ b/crypto/crypt_blowfish.c @@ -675,9 +675,9 @@ static char *BF_crypt(const char *key, const char *setting, setting[2] < 'a' || setting[2] > 'z' || !flags_by_subtype[(unsigned int)(unsigned char)setting[2] - 'a'] || setting[3] != '$' || - setting[4] < '0' || setting[4] > '3' || + setting[4] < '0' || setting[4] > '1' || setting[5] < '0' || setting[5] > '9' || - (setting[4] == '3' && setting[5] > '1') || + (setting[4] == '1' && setting[5] > '7') || setting[6] != '$') { __set_errno(EINVAL); return NULL; |