adam/znc
1
0
Fork 0
mirror of https://github.com/znc/znc.git synced 2026-06-29 22:41:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix some more unsafe substr() calls

Browse Source 
All of these require at least a valid login to znc to cause a std::out_of_range
exceptions, some might not even be exploitable!


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@2095 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
psychon
2010-08-03 10:49:03 +00:00
parent c91d032e6b
commit d0e3572afe
4 changed files with 6 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/away.cpp
+1 -1
View File
@@ -400,7 +400,7 @@ private:
CBlowfish c(m_sPassword, BF_DECRYPT);
sBuffer = c.Crypt(sFile);
if (sBuffer.substr(0, strlen(CRYPT_VERIFICATION_TOKEN)) != CRYPT_VERIFICATION_TOKEN)
if (sBuffer.Left(strlen(CRYPT_VERIFICATION_TOKEN)) != CRYPT_VERIFICATION_TOKEN)
{
// failed to decode :(
PutModule("Unable to decode Encrypted messages");