Todd C. Miller 111fd83fb8 Use constant-time string compare for plain text password check. ...

Avoid potential password guessing based on timing attacks on
the strcmp() function.  Reported by Quarkslab.

2025-04-30 15:24:50 -06:00

..

afs.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

aix_auth.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

API

Restore AUTH_INTR support, it is still needed.

2023-08-29 10:02:09 -06:00

bsdauth.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

dce.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

fwtk.c

Typographical and Grammatical fixes

2023-11-28 15:00:04 -07:00

kerb5.c

verify_krb_v5_tgt: auth name must be const to match struct sudo_auth.

2023-10-31 10:13:19 -06:00

pam.c

pam_get_item() takes a void ** arg, not const void **, on Solaris

2024-11-11 20:08:13 -07:00

passwd.c

Use constant-time string compare for plain text password check.

2025-04-30 15:24:50 -06:00

rfc1938.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

secureware.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

securid5.c

Use #include <foo.h> instead of #include "foo.h" in most cases.

2023-09-25 10:13:28 -06:00

sia.c

sudo_sia_begin_session: add missing struct sudoers_context * arg.

2023-10-31 10:26:57 -06:00

sudo_auth.c

Call gettext() on insults when displayed, not when declared.

2024-04-22 08:15:39 -06:00

sudo_auth.h

Fix spelling: resistent -> resistant

2023-10-12 10:20:34 -06:00