cmiller@zippy.cornsilk.net
4c9af55908
Bug#28984: crasher on connect with out of range password length in \
...
protocol
Fixed duplicated code, same as last commit.
One could send a malformed packet that caused the server to SEGV. In
recent versions of the password protocol, the client tells the server
what length the ciphertext is (almost always 20). If that length was
large enough to overflow a signed char, then the number would jump to
very large after being casted to unsigned int.
Instead, cast the *passwd char to uchar.
2007-06-12 08:47:36 -04:00
..
2007-02-02 17:18:42 +04:00
2006-12-22 15:30:37 +03:00
2005-09-30 14:03:55 +02:00
2007-02-01 18:00:24 +04:00
2007-04-29 04:16:17 +05:00
2007-04-29 04:16:17 +05:00
2007-01-25 18:44:35 -08:00
2006-08-10 22:55:20 +08:00
2006-08-10 22:55:20 +08:00
2006-09-28 23:41:37 +10:00
2007-04-28 14:37:40 +05:00
2007-03-27 10:49:48 +02:00
2006-08-10 22:55:20 +08:00
2006-08-10 22:55:20 +08:00
2006-08-10 22:55:20 +08:00
2006-09-28 23:41:37 +10:00
2006-09-28 23:41:37 +10:00
2006-09-28 23:41:37 +10:00
2006-09-28 23:41:37 +10:00
2007-05-04 13:17:07 -04:00
2006-08-10 22:55:20 +08:00
2007-01-31 16:15:20 +04:00
2007-03-05 11:52:28 +01:00
2007-01-24 09:41:40 +07:00
2006-10-23 23:46:35 +10:00
2007-02-02 17:18:42 +04:00
2006-08-10 22:55:20 +08:00
2005-06-05 19:38:52 +02:00
2005-05-27 14:15:08 +02:00
2006-01-24 13:58:28 +04:00
2007-01-31 09:51:05 +04:00
2005-06-21 04:24:21 -07:00
2007-04-20 15:14:09 +05:00
2007-04-20 15:14:09 +05:00
2005-04-11 10:44:48 +04:00
2007-05-04 00:53:37 +04:00
2007-04-29 16:04:43 -07:00
2007-02-21 14:45:19 +04:00
2007-02-21 14:45:19 +04:00
2006-04-07 22:26:25 +04:00
2006-04-07 22:26:25 +04:00
2007-01-11 16:45:38 +03:00
2007-01-11 16:45:38 +03:00
2007-01-25 18:44:35 -08:00
2006-12-11 18:57:23 -08:00
2006-11-29 02:39:17 +03:00
2006-10-10 17:08:47 +04:00
2007-02-06 14:58:07 +04:00
2007-03-22 12:24:56 +04:00
2005-06-05 19:38:52 +02:00
2005-05-26 12:09:14 +02:00
2007-02-14 12:24:11 -05:00
2007-01-25 18:44:35 -08:00
2007-04-29 11:56:23 +05:00
2006-12-20 19:05:35 +04:00
2006-10-06 13:34:07 +04:00
2006-11-12 20:01:58 +02:00
2006-12-05 13:45:21 +04:00
2007-02-07 09:46:20 +01:00
2007-05-08 09:09:25 +02:00
2007-03-24 14:03:27 +02:00
2007-01-29 14:31:48 +01:00
2007-03-31 00:29:18 +04:00
2007-01-13 10:49:26 -08:00
2007-01-30 13:06:36 -08:00
2006-01-11 17:31:52 +03:00
2005-06-05 19:38:52 +02:00
2005-05-04 15:05:56 +02:00
2005-06-05 19:38:52 +02:00
2006-11-13 12:28:55 +02:00
2006-11-13 12:28:55 +02:00
2005-10-25 02:27:40 +03:00
2007-01-29 14:31:48 +01:00
2007-05-08 09:09:25 +02:00
2006-12-05 13:45:21 +04:00
2007-02-05 10:20:47 +04:00
2006-08-17 12:25:40 -07:00
2007-02-21 14:45:19 +04:00
2007-02-21 14:45:19 +04:00
2006-09-28 18:11:29 -07:00
2005-09-01 16:52:59 +04:00
2006-09-28 14:30:20 -04:00
2005-05-26 12:09:14 +02:00
2007-03-04 00:47:42 +03:00
2005-05-05 09:15:14 +02:00
2007-05-08 09:09:25 +02:00
2005-09-06 12:18:23 +03:00
2007-03-20 19:09:28 +01:00
2007-01-15 13:03:21 +03:00
2005-06-05 19:38:52 +02:00
2005-05-26 12:09:14 +02:00
2006-01-31 12:47:22 +01:00
2007-01-11 16:05:03 +03:00
2005-03-23 08:36:48 +02:00
2005-06-28 00:52:21 +03:00
2006-01-10 19:13:12 +02:00
2007-01-15 13:03:21 +03:00
2006-12-08 02:20:09 +03:00
2006-12-08 02:20:09 +03:00
2005-06-05 19:38:52 +02:00
2007-03-28 18:38:42 +04:00
2007-02-26 20:35:28 +01:00
2006-12-05 13:45:21 +04:00
2005-06-05 19:38:52 +02:00
2005-05-26 12:09:14 +02:00
2005-06-05 19:38:52 +02:00
2007-06-12 08:47:36 -04:00
2007-02-08 16:01:13 -07:00
2007-01-29 14:31:48 +01:00
2007-05-14 23:55:18 -07:00
2006-06-28 16:28:29 +03:00
2007-01-18 09:53:30 -07:00
2006-09-04 09:13:40 +02:00
2006-07-01 14:31:52 -04:00
2007-01-15 13:03:21 +03:00
2005-09-14 13:18:16 +02:00
2005-06-30 17:33:23 +02:00
2005-05-09 12:16:59 +02:00
2007-05-14 16:41:09 -07:00
2006-12-20 19:08:28 +04:00
2007-03-29 14:12:32 +02:00
2006-10-20 14:31:47 +04:00
2006-09-07 00:01:00 +02:00
2006-06-14 21:06:02 +04:00
2007-04-02 10:39:23 +02:00
2006-07-06 23:59:04 +04:00
2006-11-10 15:05:38 +03:00
2006-11-05 23:25:34 +03:00
2005-05-04 15:05:56 +02:00
2007-02-12 14:31:44 +01:00
2006-04-12 23:05:38 +04:00