FreeBSD Port: xsane-0.998

[Barry Tigner]

Hi,

There is a bug in xsane-setup.c that causes any
password string beginning with a capital "S" to
read as an empty string.

Here is the code from xsane-setup.c

  /* make sure password is not stored in ascii text */
  /* this is very simple but better than nothing */
  for (i=0; i<strlen(preferences.email_auth_pass); i++)
  {
    preferences.email_auth_pass[i] ^= 0x53;
  }

If the first character of the password is a capital "S"
(0x53) , then xoring it with another 0x53 makes that
character a null character, effectively terminating
the string.

The solution is to not use a capital "S" anywhere in
the password, or to fix the code. 

Barry



-- 
Barry Tigner
MSU PA Electronics Design and Service Ctr.
1230 BioMedical Physical Sciences
Email: tigner at msu.edu
Phone: 517-884-5538