dropped connections and sometimes bounces generated by a peer sending
to this system.
dropped connections and sometimes bounces generated by a peer sending
to this system.
+JH/11 Harden plaintext authenticator against a badly misconfigured client-send
+ string. Previously it was possible to cause undefined behaviour in a
+ library routine (usually a crash). Found by "zerons".
+
+
Exim version 4.92
-----------------
Exim version 4.92
-----------------
if (ss[i+1] != '^')
ss[i] = 0;
else
if (ss[i+1] != '^')
ss[i] = 0;
else
- {
- i++;
- len--;
- memmove(ss + i, ss + i + 1, len - i);
- }
+ if (--len > ++i) memmove(ss + i, ss + i + 1, len - i);
/* The first string is attached to the AUTH command; others are sent
unembellished. */
/* The first string is attached to the AUTH command; others are sent
unembellished. */