summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2021-09-27 16:08:39 +0200
committerDaniel Stenberg <daniel@haxx.se>2021-09-27 22:34:20 +0200
commit1ddfa8e4809f4364ea7323026136ce8d0b0c6cff (patch)
tree26d4bffae90ecc962a287e679a75022bed1a7e97 /lib
parent02c9802fd19f461cd8c96862f4af4a36f334e2f5 (diff)
downloadcurl-1ddfa8e4809f4364ea7323026136ce8d0b0c6cff.tar.gz
NTLM: use DES_set_key_unchecked with OpenSSL
... as the previously used function DES_set_key() will in some cases reject using a key that it deems "weak" which will cause curl to continue using the unitialized buffer content as key instead. Assisted-by: Harry Sintonen Fixes #7779 Closes #7781
Diffstat (limited to 'lib')
-rw-r--r--lib/curl_ntlm_core.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/curl_ntlm_core.c b/lib/curl_ntlm_core.c
index 749b44e4a..70e360f24 100644
--- a/lib/curl_ntlm_core.c
+++ b/lib/curl_ntlm_core.c
@@ -150,7 +150,7 @@ static void setup_des_key(const unsigned char *key_56,
DES_set_odd_parity(&key);
/* Set the key */
- DES_set_key(&key, ks);
+ DES_set_key_unchecked(&key, ks);
}
#elif defined(USE_GNUTLS)