Hacker News
points by hnfong 3 days ago | 0 comments
There's a very detailed trace of how the bug was developed over decades at sshhole.com and the relevant discussion in https://news.ycombinator.com/item?id=50378228
[–] NewJazz 3 days ago
Thanks yeah just woke up, finished making my way through the single-article website and still unclear if other libcs do the same thing (the article says libxcrypt picked it up, but only after musl did it).
[–] NewJazz 2 days ago
Some more clarity ... Multiple implementations have these sentinel values (not OpenBSD). But unfortunately only musl had a sentinel value that was also used in shadow files...

https://hachyderm.io/@ncopa@fosstodon.org/117564809789053485