From be7050b04708487e1091d0fe716d38c6368bbb8f Mon Sep 17 00:00:00 2001 From: bojan Date: Mon, 5 Jan 2009 02:16:17 +0000 Subject: Fix a buffer overrun and password matching for SHA passwords. PR 45679. Patch by Ben Noordhuis . git-svn-id: http://svn.apache.org/repos/asf/apr/apr-util/trunk@731413 13f79535-47bb-0310-9956-ffa450edef68 --- crypto/apr_sha1.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/crypto/apr_sha1.c b/crypto/apr_sha1.c index 31a9f9cc..8959ffc0 100644 --- a/crypto/apr_sha1.c +++ b/crypto/apr_sha1.c @@ -351,10 +351,6 @@ APU_DECLARE(void) apr_sha1_base64(const char *clear, int len, char *out) apr_sha1_ctx_t context; apr_byte_t digest[APR_SHA1_DIGESTSIZE]; - if (strncmp(clear, APR_SHA1PW_ID, APR_SHA1PW_IDLEN) == 0) { - clear += APR_SHA1PW_IDLEN; - } - apr_sha1_init(&context); apr_sha1_update(&context, clear, len); apr_sha1_final(digest, &context); -- cgit v1.2.1