lighttpd
/
lighttpd1.4
2
0
Fork 0
Code Issues Releases Wiki Activity

fixed possible overflow in password-salt handling 

(reported on slashdot by james-web@and.org)


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@871 152afb58-edef-0310-8abb-c4023f1b3aa9
This commit is contained in:
Jan Kneschke 2005-11-21 15:04:28 +00:00
parent 2cc4f96765
commit ad7d85b7f5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/http_auth.c
View File

@ -481,7 +481,7 @@ static int http_auth_basic_password_compare(server *srv, mod_auth_plugin_data *p
salt_len = dollar - password->ptr;
}
if (salt_len - 1 > sizeof(salt)) {
if (salt_len > sizeof(salt) - 1) {
fprintf(stderr, "%s.%d\n", __FILE__, __LINE__);
return -1;
}