Commit dadc53ff authored by Sergei Golubchik's avatar Sergei Golubchik

MDEV-19882 pam v2: auth_pam_tool truncates passwords that are not null-terminated

Don't assume that passwords (and other conv replies) are zero-terminated.
If they are, though, strndup() down below will take care of that.
parent d67ea815
......@@ -33,7 +33,7 @@ static int roundtrip(struct param *param, const unsigned char *buf,
if (write(1, &b, 1) < 1 || write_string(1, buf, buf_len))
return -1;
*pkt= (unsigned char *) param->buf;
return read_string(0, (char *) param->buf, (int) sizeof(param->buf)) - 1;
return read_string(0, (char *) param->buf, (int) sizeof(param->buf));
}
typedef struct st_mysql_server_auth_info
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment