New subject: [Issue 10651] argon2 pwmod: hashed value includes trailing NUL byte when built with libargon2

29 Oct 2026


      https://bugs.openldap.org/show_bug.cgi?id=10651
Issue ID: 10651
           Summary: argon2 pwmod: hashed value includes trailing NUL byte
                    when built with libargon2
           Product: OpenLDAP
           Version: 2.6.16
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: slapd
          Assignee: bugs@openldap.org
          Reporter: hamano@osstech.co.jp
  Target Milestone: ---
With libargon2 (`HAVE_LIBARGON2`), `slapd_argon2_hash()` sets
```c
hash->bv_len = scheme->bv_len + encoded_length;
```
but `argon2_encodedlen()` includes the terminating NUL, so the stored
`{ARGON2}` value ends with `\0` (and is shown base64-encoded in LDIF). The
libsodium path uses `strlen()` and is not affected.
-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 10651] New: argon2 pwmod: hashed value includes trailing NUL byte when built with libargon2