VladPolskiy/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2025-07-21 23:40:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add better alternative randomness and check for hex stricter

Browse Source
This commit is contained in:
Ilia Rostovtsev
2020-03-20 14:38:18 +03:00
parent ef1d3f2a54
commit fa4559cba8
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
miniserv.pl
View File

@ -4034,7 +4034,7 @@ if (!$bad_urandom) {
my $tmpsid;
if (read(RANDOM, $tmpsid, 16) == 16) {
$sid = lc(unpack('h*',$tmpsid));
if (length($sid) < 32) {
if ($sid !~ /^[0-9a-fA-F]{32}+$/) {
$sid = 'bad';
}
}
@ -4043,8 +4043,10 @@ if (!$bad_urandom) {
alarm(0);
}
if (!$sid && !$force_urandom) {
my $offset = int(rand(2048));
my @charset = ('0' ..'9', 'a' .. 'f');
$sid = join('', map { $charset[rand(@charset)] } 1 .. 32);
$sid = join('', map { $charset[rand(@charset)] } 1 .. 4096);
$sid = substr($sid, $offset, 32);
}
return $sid;
}