Bug 860 – sudo do not support too long password

Bug 860 - sudo do not support too long password


Summary:	sudo do not support too long password

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.8.19
Hardware:	PC Linux

Importance:	low normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2018-11-16 18:52 MST by captaindesastres
Modified:	2020-06-19 06:23 MDT (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description captaindesastres 2018-11-16 18:52:36 MST

I don't know if it is wanted but I discovered that, if I set a password with 256 characters or more, it's no more accepted by sudo.

Comment 1 Todd C. Miller 2018-11-17 07:13:04 MST

There has to be some upper limit on the size of the password buffer.  In the case of sudo, that limit is 255.  The plugin ABI sets the maximum size of a conversation reply to 255 so this is unlikely to change.

Comment 2 Todd C. Miller 2020-06-19 06:23:02 MDT

The maximum size for a password was increased from 255 to 1023 in sudo 1.9.0.