4
77%
master: 77%

Ran 13 Oct 2016 08:58PM UTC

Files 67

Run time 4s

Badge

Embed ▾

Committed 13 Oct 2016 08:57PM UTC coverage: 76.913% (-0.06%) from 76.976%

Job # TOXENV=py35

Build Type

Pull #3

travis-ci

Committed by

web-flow

Commit Message

strip NUL characters where it actually matters

bcrypt doesn't handle NUL characters. Probably with that in mind,
mara strips any NUL char from the string that is going to be hashed.
However, the strip is taking place before sha512'ing the password,
and sha512 *can* produce NUL chars.

This patch moves the stripping of NUL characters to the already sha512
hashed string, thus ensuring that no NUL character reaches the bcrypt
hashing function itself.

Note: since this actually changes the hashed password, this change
might not be backwards compatible with your current database.

Pull Request Pull Request #3: strip NUL characters where it actually matters

Run Details

2442 of 3175 relevant lines covered (76.91%)

0.77 hits per line

radiac / mara / 24 / 4
77%
master: 77%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 24.4 (TOXENV=py35)

radiac / mara / 24 / 4 77% master: 77%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 24.4 (TOXENV=py35)

radiac / mara / 24 / 4
77%
master: 77%

README BADGES
x