🚀 go-pugleaf

In Version 4 : admin/kdb_edit.c

kdb_verify_master_key(master_key, master_key_schedule, stdout)
static C_Block master_key;
static Key_schedule master_key_schedule;
FILE	*stdout;

Now change the last argument to (FILE *)NULL ,and even if the
master password does not verify, the routine returns the master
key version (> 1) and all is well.

The problem seems to be in the following bit of code
in kdb_verify_master_key(..)


>if (n && (out != (FILE *) NULL)) {
>    fprintf(out, gettxt("\n\07\07verify_master_key: Invalid master key; 
> does not match database.\n"));
>   return (-1);
>  }

Comments ???

I have seen some wierd stuff in version 5 but this takes the cake.

---Mukund
__________________________________________________________
Mukund Belliappa		mukund@tivoli.com
Tivoli systems Inc.
Austin Texas.
(512)794-9070