sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-07 00:01:49 -04:00
Code Issues Projects Releases Wiki Activity

pluto: Fix for null-terminated XAuth secrets (as sent by Android 4).

Browse Source
This commit is contained in:
Tobias Brunner 2012-04-24 09:25:38 +02:00
parent 5ff8fe5d48
commit 7d85bebc49
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/pluto/plugins/xauth/xauth_default_verifier.c
View File

@ -43,6 +43,13 @@ METHOD(xauth_verifier_t, verify_secret, bool,
if (get_xauth_secret(user, server, &xauth_secret)) if (get_xauth_secret(user, server, &xauth_secret))
{ {
success = chunk_equals(secret, xauth_secret); success = chunk_equals(secret, xauth_secret);
if (!success && secret.len && secret.ptr[secret.len - 1] == 0)
{ /* fix for null-terminated passwords (e.g. from Android 4) */
secret.len--;
success = chunk_equals(secret, xauth_secret);
}
chunk_clear(&xauth_secret); chunk_clear(&xauth_secret);
} }
return success; return success;