From a14ae347e47381b1a5871572b5b51c85b4f764bd Mon Sep 17 00:00:00 2001 From: Ivan Grokhotkov Date: Fri, 18 Mar 2016 23:33:35 +0300 Subject: [PATCH] Fix buffer overflow in ESP8266WebServer::authenticate (#1790) --- libraries/ESP8266WebServer/src/ESP8266WebServer.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/ESP8266WebServer/src/ESP8266WebServer.cpp b/libraries/ESP8266WebServer/src/ESP8266WebServer.cpp index a01abf416..1ab80260f 100644 --- a/libraries/ESP8266WebServer/src/ESP8266WebServer.cpp +++ b/libraries/ESP8266WebServer/src/ESP8266WebServer.cpp @@ -93,7 +93,7 @@ bool ESP8266WebServer::authenticate(const char * username, const char * password authReq = authReq.substring(6); authReq.trim(); char toencodeLen = strlen(username)+strlen(password)+1; - char *toencode = new char[toencodeLen]; + char *toencode = new char[toencodeLen + 1]; if(toencode == NULL){ authReq = String(); return false;