From d556e8afdd33cbe89ed2f3f4e2d0700e495dadc9 Mon Sep 17 00:00:00 2001 From: Stefan Esser Date: Sat, 15 Feb 2014 12:12:55 +0100 Subject: Change algorithm a bit for empty keys to make it easier testable --- session.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/session.c b/session.c index b435c4d..3c40567 100644 --- a/session.c +++ b/session.c @@ -746,8 +746,8 @@ char *suhosin_generate_key(char *key, zend_bool ua, zend_bool dr, long raddr, ch SDEBUG("(suhosin_generate_key) KEY: %s - UA: %s - DR: %s - RA: %s", key,_ua,_dr,_ra); suhosin_SHA256Init(&ctx); - if (key == NULL) { - suhosin_SHA256Update(&ctx, (unsigned char*)"D3F4UL7", sizeof("D3F4UL7")); + if (key == NULL || *key == 0) { + suhosin_SHA256Update(&ctx, (unsigned char*)"D3F4UL7", strlen("D3F4UL7")); } else { suhosin_SHA256Update(&ctx, (unsigned char*)key, strlen(key)); } -- cgit v1.3