diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2021-09-27 16:08:39 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2021-09-27 16:08:39 +0200 |
| commit | f29f5988e97ffaf4be6e78c6d4b9fbf7c59a5432 (patch) | |
| tree | 58093c41e87d2b8c947c2a79bd1ccbce7f1b0cb0 | |
| parent | 06981ba7f620364eba253f5afcd7ebfaefcc8694 (diff) | |
| download | curl-bagder/openssl-set_key.tar.gz | |
NTLM: use DES_set_key_unchecked with OpenSSLbagder/openssl-set_key
... as the previously used function DES_set_key() will in some cases
reject using a key that it deems "weak" which will cause curl to
continue using the unitialized buffer content as key instead.
Assisted-by: Harry Sintonen
Fixes #7779
| -rw-r--r-- | lib/curl_ntlm_core.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/curl_ntlm_core.c b/lib/curl_ntlm_core.c index 749b44e4a..70e360f24 100644 --- a/lib/curl_ntlm_core.c +++ b/lib/curl_ntlm_core.c @@ -150,7 +150,7 @@ static void setup_des_key(const unsigned char *key_56, DES_set_odd_parity(&key); /* Set the key */ - DES_set_key(&key, ks); + DES_set_key_unchecked(&key, ks); } #elif defined(USE_GNUTLS) |