Title:
Bug 86470:-(Watson Migration Closure)We use an Oracle function to decrypt passwords stored in Oracle and retrieve the stored password to compare with an encrypted password submitted by a user
| View in TrackerStatus/Resolution/Reason: Closed/Won't Fix/LowImpact
Reporter/Name(from Bugbase): Matthew Beatty / Matthew Beatty (beattym)
Created: 02/23/2011
Versions: 9.0.1
Failure Type: Unspecified
Found In Build/Fixed In Build: 9,0,1,274733 /
Priority/Frequency: Trivial / Unknown
Locale/System: English / Solaris All
Vote Count: 0
Problem:
We use an Oracle function to decrypt passwords stored in Oracle and retrieve the stored password to compare with an encrypted password submitted by a user. The query used that produces the error is: select inspection_decrypt('#cookie.wtgadminpass#') passwd from dualThis code has been in use for about 8 years. The issue was not triggered until the hot fix was applied.
Method:
Apply APSB11-04
Result:
[Macromedia][Oracle JDBC Driver][Oracle]ORA-28232: invalid input length for obfuscation toolkit ORA-06512: at "SYS.DBMS_OBFUSCATION_TOOLKIT_FFI", line 40 ORA-06512: at "SYS.DBMS_OBFUSCATION_TOOLKIT", line 153 ORA-06512: at "WEBUSER.INSPECTION_DECRYPT", line 5
----------------------------- Additional Watson Details -----------------------------
Watson Bug ID: 3043439
External Customer Info:
External Company:
External Customer Name: Matthew Beatty
External Customer Email: 548D6D9B4561E9C6992015D5
External Test Config: 02/23/2011Attachments:
Comments: