➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: rotormodule's set_key calls strlen
Type: Stage:
Components: Library (Lib) Versions:
process
Status: closed Resolution: wont fix
Dependencies: Superseder:
Assigned To: Nosy List: dbrueck, gvanrossum
Priority: normal Keywords:

Created on 2002-06-10 14:11 by dbrueck, last changed 2022-04-10 16:05 by admin. This issue is now closed.

Messages (2)
msg11137 - (view) Author: Dave Brueck (dbrueck) Date: 2002-06-10 14:11 
In rotormodule.c's set_key function a call is made to strlen 
on the user-supplied key. According to the documenation, 
the key can contain arbitrary binary data (including zeros 
that would confuse strlen).
msg11138 - (view) Author: Guido van Rossum (gvanrossum) * (Python committer) Date: 2002-06-10 19:47 
Logged In: YES 
user_id=6380

The rotor module is too old to fix (we're considering
retiring it, since it is cryptographically weak), so I've
opted for documenting this fact.
History
Date User Action Args
2022-04-10 16:05:24adminsetgithub: 36716
2002-06-10 14:11:48dbrueckcreate