Attachment 292120 Details for Bug 429254 – Upstream Patch

[patch] Upstream Patch

CVE-2006-1329.patch (text/plain), 1.01 KB, created by Mark J. Cox on 2008-01-18 09:48:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mark J. Cox

Created: 2008-01-18 09:48:30 UTC

Size: 1.01 KB

patch

obsolete

>diff -urN jabberd-2.0s10/scod/scod.c jabberd-2.0s11/scod/scod.c
>--- jabberd-2.0s10/scod/scod.c	2003-10-27 23:53:43.000000000 -0500
>+++ jabberd-2.0s11/scod/scod.c	2005-10-29 16:23:57.000000000 -0400
>@@ -279,7 +279,10 @@
> int scod_server_step(scod_t sd, const char *resp, int resplen, char **chal, int *challen) {
>     int ret;
> 
>-    assert((int) sd);
>+    /* Check that auth has actually begun */
>+    if(sd == NULL)
>+        return sd_err_UNKNOWN_MECH;
>+
>     assert((int) resp);
>     assert((int) chal);
>     assert((int) challen);
>diff -urN jabberd-2.0s10/sx/sasl.c jabberd-2.0s11/sx/sasl.c
>--- jabberd-2.0s10/sx/sasl.c	2005-07-26 03:28:15.000000000 -0400
>+++ jabberd-2.0s11/sx/sasl.c	2005-10-29 16:23:57.000000000 -0400
>@@ -211,7 +211,7 @@
> static void _sx_sasl_client_process(sx_t s, sx_plugin_t p, scod_t sd, char *mech, char *in, int inlen) {
>     _sx_sasl_t ctx = (_sx_sasl_t) p->private;
>     char realm[256];
>-    char *buf, *out;
>+    char *buf = NULL, *out = NULL;
>     int buflen, outlen, ret;
> 
>     if(mech != NULL) {

Actions: View | Diff

Attachments on bug 429254: 292120