- markus@cvs.openbsd.org 2003/08/26 09:58:43

     [auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
     [auth2.c monitor.c]
     fix passwd auth for 'username leaks via timing'; with djm@, original
     patches from solar

1 files changed, 22 insertions, 1 deletions

diff --git a/auth.c b/auth.c
index f645cc112..46e495adf 100644
--- a/auth.c
+++ b/auth.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth.c,v 1.48 2003/06/02 09:17:34 markus Exp $");
+RCSID("$OpenBSD: auth.c,v 1.49 2003/08/26 09:58:43 markus Exp $");
 
 #ifdef HAVE_LOGIN_H
 #include <login.h>
@@ -589,3 +589,24 @@ auth_debug_reset(void)
                 auth_debug_init = 1;
         }
 }
+
+struct passwd *
+fakepw(void)
+{
+        static struct passwd fake;
+
+        memset(&fake, 0, sizeof(fake));
+        fake.pw_name = "NOUSER";
+        fake.pw_passwd =
+            "$2a$06$r3.juUaHZDlIbQaO2dS9FuYxL1W9M81R1Tc92PoSNmzvpEqLkLGrK";     
+        fake.pw_gecos = "NOUSER";
+        fake.pw_uid = -1;
+        fake.pw_gid = -1;
+#ifdef HAVE_PW_CLASS_IN_PASSWD
+        fake.pw_class = "";
+#endif
+        fake.pw_dir = "/nonexist";
+        fake.pw_shell = "/nonexist";
+
+        return (&fake);
+}