[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #4627 [Torctl]: TorCtl doesn't handle quoted passwords



#4627: TorCtl doesn't handle quoted passwords
---------------------+------------------------------------------------------
 Reporter:  atagar   |          Owner:     
     Type:  defect   |         Status:  new
 Priority:  trivial  |      Milestone:     
Component:  Torctl   |        Version:     
 Keywords:  easy     |         Parent:     
   Points:           |   Actualpoints:     
---------------------+------------------------------------------------------
 The TorCtl authenticate_password passes the password directly to the
 control socket without escaping quotes. For more information see...
 https://trac.torproject.org/projects/tor/ticket/4600

 Fixing this should be as simple as uncommenting the hex translation or
 doing...
 secret = secret.replace('"', '\\"')

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4627>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs