1berry/MariaDB-server
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Bug #13934049: 64884: LOGINS WITH INCORRECT PASSWORD ARE ALLOWED

Browse Source 
Fixed an improper type conversion on return that can make the server accept
logins with a wrong password.
This commit is contained in:
Georgi Kodinov 2012-04-06 12:04:07 +03:00
parent b5c690aa54
commit 7dcf0a66fd
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sql/password.c
View File

@ -531,7 +531,7 @@ check_scramble(const char *scramble_arg, const char *message,
mysql_sha1_reset(&sha1_context);
mysql_sha1_input(&sha1_context, buf, SHA1_HASH_SIZE);
mysql_sha1_result(&sha1_context, hash_stage2_reassured);
return memcmp(hash_stage2, hash_stage2_reassured, SHA1_HASH_SIZE);
return test(memcmp(hash_stage2, hash_stage2_reassured, SHA1_HASH_SIZE));
}