jcs
/subtext
/amendments
/646
user: Off-by-one in salt creation
jcs made amendment 646 1 day ago
--- user.c Thu Dec 11 20:52:45 2025
+++ user.c Tue Sep 22 15:26:44 2026
@@ -205,7 +205,7 @@ user_set_password(struct user *user, const char *passw
short n;
/* make a random salt out of a sha256 of some random longs */
- for (n = 0; n < nitems(tmp) - 1; n++)
+ for (n = 0; n < nitems(tmp); n++)
tmp[n] = xorshift32();
SHA256Data((const u_int8_t *)tmp, sizeof(tmp), salt);