Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client cuts passwords at 47 chars #530

Closed
lmoureaux opened this issue Jul 20, 2021 · 7 comments · Fixed by #531
Closed

Client cuts passwords at 47 chars #530

lmoureaux opened this issue Jul 20, 2021 · 7 comments · Fixed by #531
Labels
bug Something isn't working

Comments

@lmoureaux
Copy link
Contributor

lmoureaux commented Jul 20, 2021

The client uses MAX_LEN_NAME (=48) where it ought to be MAX_LEN_PASSWORD (=256 512):


Found by panch93

@lmoureaux lmoureaux added the bug Something isn't working label Jul 20, 2021
@DobbyK
Copy link
Contributor

DobbyK commented Jul 20, 2021

I found where MAX_LEN_PASSWORD is definite and it equals 512?

#define MAX_LEN_PASSWORD \

Is this the correct place where it was defined and is it a mistake, or did you make a mistake?

@lmoureaux
Copy link
Contributor Author

MAX_LEN_NAME in page_network.cpp is wrong, it should be MAX_LEN_PASSWORD.

@DobbyK
Copy link
Contributor

DobbyK commented Jul 20, 2021

MAX_LEN_NAME in page_network.cpp is wrong, it should be MAX_LEN_PASSWORD.

I don't think you understood my question, sorry. You said MAX_LEN_PASSWORD = 256, yet where (i assume/believe) it is definied, defines it as 512. Is that a mistake and should that be 256, or did you type it incorrectly?

@lmoureaux
Copy link
Contributor Author

Oh sorry I mistyped, that's what named constants are for 😊 It should be MAX_LEN_PASSWORD regardless of its actual value.

@DobbyK
Copy link
Contributor

DobbyK commented Jul 20, 2021

I would suggest that we not have it equal 512 as that is a really long password, and even know if someone wanted it really secure could easily risk not being able to get into the account.

@lmoureaux
Copy link
Contributor Author

A limit at 512 bytes doesn't hurt either... Changing it would break compatibility with existing clients and servers.

@DobbyK
Copy link
Contributor

DobbyK commented Jul 20, 2021

A limit at 512 bytes doesn't hurt either... Changing it would break compatibility with existing clients and servers.

Makes sense. #531 for fix then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants