6 May
2013
6 May
'13
9:02 a.m.
Stefan Winter wrote:
Hi one more time,
and another update: it's one specific SSHA1-Hash which makes the server crash; I can reproduce this easily.
The magic hash value is:
SSHA1-Password := PVwqvpqoyQBACLE3Nxk2ItoDjx1RT3JyKm9SdkRTb1o5aSUm
and makes things fail specifically during a memcpy inside normify(). Below is what valgrind has to say. Note that the user input in User-Password is irrelevant; failure is before it's even checked.
Weird. I've fixed it, after some poking of the function. It now base64-decodes the password once, and only once. Alan DeKok.