changeset 23256:73b86c478d37

Fix stack smashing for forced old (port 5223) ssl auth. Closes #5974. committer: Sadrul Habib Chowdhury <imadil@gmail.com>
author Andrew Hoffman <Andrew Hoffman>
date Sun, 01 Jun 2008 01:34:34 +0000
parents 86bf0ce0d7ac
children 9bde5cac5d1a
files COPYRIGHT libpurple/protocols/jabber/auth.c
diffstat 2 files changed, 2 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/COPYRIGHT	Sat May 31 13:30:28 2008 +0000
+++ b/COPYRIGHT	Sun Jun 01 01:34:34 2008 +0000
@@ -178,6 +178,7 @@
 hjheins
 Hil
 Casey Ho
+Andrew Hoffman
 Iain Holmes
 Joshua Honeycutt
 Nigel Horne
--- a/libpurple/protocols/jabber/auth.c	Sat May 31 13:30:28 2008 +0000
+++ b/libpurple/protocols/jabber/auth.c	Sun Jun 01 01:34:34 2008 +0000
@@ -706,7 +706,7 @@
 		} else if(js->stream_id && xmlnode_get_child(query, "crammd5")) {
 			const char *challenge;
 			guchar digest[16];
-			char h[17], *p;
+			char h[33], *p;
 			int i;
 
 			challenge = xmlnode_get_attrib(xmlnode_get_child(query, "crammd5"), "challenge");