Skip Menu |
 

This queue is for tickets about the Net-SSH-Perl CPAN distribution.

Report information
The Basics
Id: 31490
Status: resolved
Priority: 0/
Queue: Net-SSH-Perl

People
Owner: Nobody in particular
Requestors: Peter.Haydon [...] uk.fujitsu.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: 1.31



Subject: logical/bitwise AND mixup in RSA.pm
Date: Thu, 13 Dec 2007 16:28:58 -0000
To: <bug-Net-SSH-Perl [...] rt.cpan.org>
From: "Haydon Peter" <Peter.Haydon [...] uk.fujitsu.com>
Download (untitled) / with headers
text/plain 684b
The following line in the 'verify' function of Net::SSH::Perl::Key::RSA.pm should probably read: my $dgst = ${ $key->{datafellows} } & SSH_COMPAT_BUG_RSASIGMD5 ? 'MD5' : 'SHA1'; and not: my $dgst = ${ $key->{datafellows} } && SSH_COMPAT_BUG_RSASIGMD5 ? 'MD5' : 'SHA1'; i.e. a 'logical' AND has been typed where a bitwise AND was intended. When the first term is non-zero (mine was usually '31') and the second term is a constant value of 0x2000, the consequence was that 'MD5' was always selected even when 'SHA1' was the correct value. Module version info is: # $Id: RSA.pm,v 1.8 2001/07/11 21:57:33 btrott Exp $ Regards, Peter Haydon
Thanks for catching that - it (and another similar one) have been fixed in version 1.31.


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.