[syslinux] MENU / SHA1 passwords not working.

H. Peter Anvin hpa at zytor.com
Mon Jan 14 19:32:02 PST 2008


Jeffrey Hutzelman wrote:
> --On Wednesday, January 09, 2008 03:20:02 PM +0000 Simon Daniels 
> <S.Daniels at uel.ac.uk> wrote:
> 
>> However if I hash a password using the sha1pass script the resulting
>> hashes don't work.
> 
> As of syslinux-3.53 (the latest I have lying around), the code in 
> com32/modules/menumain.c for checking sha1 passwords has a bug which 
> causes checking of salted passwords to fail.  Specifically, it tries to 
> fold the salt into the hash before initing the hash context.  I have 
> attached a patch (untested) which should fix this problem.
> 

D'oh!

OK, I feel dumb now.  Right after a release, too...

	-hpa




More information about the Syslinux mailing list