diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2021-09-27 16:08:39 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2021-09-27 22:34:20 +0200 |
| commit | 1ddfa8e4809f4364ea7323026136ce8d0b0c6cff (patch) | |
| tree | 26d4bffae90ecc962a287e679a75022bed1a7e97 | |
| parent | 02c9802fd19f461cd8c96862f4af4a36f334e2f5 (diff) | |
| download | curl-1ddfa8e4809f4364ea7323026136ce8d0b0c6cff.tar.gz | |
NTLM: use DES_set_key_unchecked with OpenSSL
... as the previously used function DES_set_key() will in some cases
reject using a key that it deems "weak" which will cause curl to
continue using the unitialized buffer content as key instead.
Assisted-by: Harry Sintonen
Fixes #7779
Closes #7781
| -rw-r--r-- | lib/curl_ntlm_core.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/curl_ntlm_core.c b/lib/curl_ntlm_core.c index 749b44e4a..70e360f24 100644 --- a/lib/curl_ntlm_core.c +++ b/lib/curl_ntlm_core.c @@ -150,7 +150,7 @@ static void setup_des_key(const unsigned char *key_56, DES_set_odd_parity(&key); /* Set the key */ - DES_set_key(&key, ks); + DES_set_key_unchecked(&key, ks); } #elif defined(USE_GNUTLS) |