apr-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 49496] New: Password (getpass()) truncation issue on HP-UX in apr-0.9.18 (till 1.4.2)
Date Thu, 24 Jun 2010 11:10:27 GMT

           Summary: Password (getpass()) truncation issue on HP-UX in
                    apr-0.9.18 (till 1.4.2)
           Product: APR
           Version: HEAD
          Platform: HP
        OS/Version: HP-UX
            Status: NEW
          Severity: critical
          Priority: P2
         Component: APR
        AssignedTo: bugs@apr.apache.org
        ReportedBy: rajeshkc@yahoo.com

[This was posted on dev@apr.apache.org mailing list - saw no reply]

I am using subversion client on HP-UX which has a dependency on apr, apr-util.
The packages available for HP-UX porting and archiving center from


has password truncation issue on HP-UX (all versions, 11.11, 11.23, 11,31) on
PA-RISC and IA64.

I could track the issue to HP-UX getpass() API which truncates the password at
8 characters. Unfortunately, apr configure scripts finds and uses getpass()
HP-UX API. To resolve the issue I had to edit
.../apr-0.9.18/passwd/apr_getpass.c to manually undefine HAVE_GETPASS and let
apr internal getpass() function be used.

#if defined(__hpux) || defined(__hpux__)

I checked the apr source tree up to 1.4.2 and the issue is present in all apr

The recommended password reading API on HP-UX is getpasswd() defined in libsec.
I would like to request apr developers to resolve the apr issue on HP-UX by
either of following methods,

- On HP-UX, always use apr internal getpass() / apr_getpass().
- On HP-UX, configure should check for getpasswd() available in libsec library.

If this issue could be resolved in apr on HP-UX, we don't need users to make
source change to apr to be able to use it on HP-UX with password lengths
greater than 8 characters.

This is a critical issue being faced on HP-UX while using subversion client.


Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org

View raw message